CVE-2023-1728

9.8 criticalEPSS 1.4%

Critical (9.8) in fernus learning management systems. EPSS 1.4% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection. This issue affects LMS: before 23.04.03.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-04-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fernus:learning_management_systems

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0194
https://www.usom.gov.tr/bildirim/tr-23-0194
https://www.usom.gov.tr/bildirim/tr-23-0194

Check your stack JSON