by Kastro
Paper/Archive/CVE-2023-53950

CVE-2023-53950

innovastudio WYSIWYG Editor — InnovaStudio WYSIWYG Editor 5.4 Unrestricted File Upload via Filename Manipulation

EPSS 0.7%public exploitCVSS 9.8
critical.is priorityof 100
50
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 51.2.512 × 2010.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

InnovaStudio WYSIWYG Editor 5.4 contains an unrestricted file upload vulnerability that allows attackers to bypass file extension restrictions through filename manipulation. Attackers can upload malicious ASP shells by using null byte techniques and alternate file extensions to circumvent upload controls in the asset manager.

Affected

ProductAffectedFixed inSource
WYSIWYG Editor≤ 5.4–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitexploit-db.com/exploits/51362refinnovastudio.comwriteupvulncheck.com/advisories/innovastudio-wysiwyg-editor-unrestricted-file-upload-via-filename-manipulation