high8.8
CVE-2023-23328
A File Upload vulnerability exists in AvantFAX 3.3.7.
Impact
A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avantfax | Avantfax | Version 3.3.7 |