CVE-2023-48394 — Kaifa Technology WebITR - Arbitrary File Upload
Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user pri…
Published: 2023-12-15 · CVSS: 8.8 · CVSS 3.1
Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7