CVE-2023-23314

Description

An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file.

Related CPE's

References

https://github.com/helloxz/zdir/issues/90

CvssV3 impact

CvssV2 impact