high8.8
CVE-2023-42335
Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachme…
Impact
Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fl3xx | Crew | Version 2.10.37 |
| Fl3xx | Dispatch | Version 2.10.37 |