CVE-2023-37289

9.8 criticalEPSS 0.9%

Critical (9.8) in infodoc document on-line submission and approval system. EPSS 0.9% chance of exploitation in the next 30 days.

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service. This issue affects Document On-line Submission and Approval System: 22547, 22567.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-07-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

infodoc:document_on-line_submission_and_approval_system

References

Check your stack JSON