high8.8
CVE-2023-4097
The file upload functionality is not implemented correctly and allows uploading of any type of file.
Impact
The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qsige | Qsige | Version 3.0.0.0 |