CVE Catalog
CVE-2023-27753
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk0.33%
26th percentile - higher than 26% of all known CVEs
Summary
An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update to the latest version of MK-Auth and implement mechanisms to restrict file upload capabilities for users.
Other vulnerabilities in MK-Auth 23.01K4.9
Original NVD description (English source)
An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS