CVE-2023-50692

Published: 2023-12-28T06:15Z

Last Modified: 2024-11-21T08:37Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to the download_url parameter in the app/admin/exts/ directory. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt