CVE-2023-39377

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

VendorProductVersions
SiberianCMSSiberianCMS>= versions 4.*, 5.*, <= upgrade to version 4.20.44 or 5.0.4

References

Timeline

Published
Sep 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-393788.8SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated userCVE-2023-393797.5Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. AsCVE-2023-39384.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ZkTeco-based OEM devices allows an aCVE-2023-393807.5Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnorCVE-2023-393817.5Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-393827.5Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restCVE-2023-393837.5Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromisCVE-2023-393847.5Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause featCVE-2023-393859.1Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unaCVE-2023-393867.5Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newCVE-2023-393875.3Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-uCVE-2023-393887.5Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause hom
CVE-2023-39377: High severity, CVSS 7.2 | Vulnix