CVE-2023-32753: ITPison OMICARD EDM - Arbitrary File Upload
9.8
CVSS
Description
OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Classification
CVE ID: CVE-2023-32753
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.8
Affected Products
Vendor: ITPison
Product: Contact ITPison
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 22.55% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)