CVE-2023-6723

An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:europeana:repox:2.3.7:*:*:*:*:*:*:*

History

15 Dec 2023, 20:37

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~10.0~~	v2 : unknown v3 : 9.8
CPE		cpe:2.3:a:europeana:repox:2.3.7:::::::*
References	~~() https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox -~~	() https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox - Third Party Advisory
First Time		Europeana repox Europeana

13 Dec 2023, 13:35

Type	Values Removed	Values Added
Summary		(es) Se identificó una vulnerabilidad de carga de archivos sin restricciones en Repbox, que permite a un atacante cargar archivos maliciosos a través de la función transforamationfileupload, debido a la falta de controles adecuados de validación del tipo de archivo, lo que resulta en un compromiso total del sistema.

13 Dec 2023, 11:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-13 11:15

Updated : 2023-12-15 20:37

NVD link : CVE-2023-6723

Mitre link : CVE-2023-6723

CVE.ORG link : CVE-2023-6723

JSON object : View

Products Affected

europeana

repox

CWE

CWE-434

Unrestricted Upload of File with Dangerous Type

{"id": "CVE-2023-6723", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "cve-coordination@incibe.es", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.9}]}, "published": "2023-12-13T11:15:08.040", "references": [{"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox", "tags": ["Third Party Advisory"], "source": "cve-coordination@incibe.es"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "cve-coordination@incibe.es", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise."}, {"lang": "es", "value": "Se identific\u00f3 una vulnerabilidad de carga de archivos sin restricciones en Repbox, que permite a un atacante cargar archivos maliciosos a trav\u00e9s de la funci\u00f3n transforamationfileupload, debido a la falta de controles adecuados de validaci\u00f3n del tipo de archivo, lo que resulta en un compromiso total del sistema."}], "lastModified": "2023-12-15T20:37:10.720", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:europeana:repox:2.3.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA4CFB07-33A3-44FB-A484-9C23CD4AA5B3"}], "operator": "OR"}]}], "sourceIdentifier": "cve-coordination@incibe.es"}