CVE-2023-39147

An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

1.23% chance of exploitation in the next 30 days, 67th percentile

Published

2023-08-01

Updated

2025-02-13

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/173878/Uvdesk-1.1.3-Shell-Upload.html

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51639

References

• CVE Record
• NVD entry

Related

• CVE-2023-39144
• CVE-2023-3915
• CVE-2023-39143
• CVE-2023-39167
• CVE-2023-39141
• CVE-2023-3917