← Back to CVE List

CVE-2023-46865

Published: 2023-10-30T01:15Z
Last Modified: 2024-11-21T08:29Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt