CVE Catalog
CVE-2023-6675
CriticalSummary
CVE-2023-6675 vulnerability affects CyberMath, allowing unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server.
Risk Assessment
Exploitation of this vulnerability could lead to server takeover, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update CyberMath to version 1.5 or later to mitigate this vulnerability and implement additional security measures regarding file uploads.
Original NVD description (English source)
Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. This issue affects CyberMath: from v.1.4 before v.1.5.

