CVE-2023-29625

8.8 highEPSS 1.0%

High (8.8) in employee performance evaluation system project employee performance evaluation system. EPSS 1.0% chance of exploitation in the next 30 days.

Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-04-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

employee_performance_evaluation_system_project:employee_performance_evaluation_system

References

https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Employee-Performance-Evaluation-1.0
https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Employee-Performance-Evaluation-1.0

Check your stack JSON