CVE-2023-23607

Published: 2023-01-20T21:15Z

Last Modified: 2024-11-21T07:46Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

erohtar/Dasherr is a dashboard for self-hosted services. In affected versions unrestricted file upload allows any unauthenticated user to execute arbitrary code on the server. The file /www/include/filesave.php allows for any file to uploaded to anywhere. If an attacker uploads a php file they can execute code on the server. This issue has been addressed in version 1.05.00. Users are advised to upgrade. There are no known workarounds for this issue. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt