CVE-2023-6723 — CRITICAL (10.0)

Vulnerability Description

An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.

CVSS Score

10.0

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Europeana	Repox	2.3.7

Related Weaknesses (CWE)

CWE-434

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repoThird Party Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repoThird Party Advisory

FAQ

What is CVE-2023-6723?

CVE-2023-6723 is a vulnerability with a CVSS score of 10.0 (CRITICAL). An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file t...

How severe is CVE-2023-6723?

CVE-2023-6723 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-6723?

Check the references section above for vendor advisories and patch information. Affected products include: Europeana Repox.