EXPOSURES › CVE-2023-51924

CVE-2023-51924

CRITICAL

DETAIL

SourceNVD · cve Published2024-01-20 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-51924 ↗

⚡ RCE SHAME 50/100 rce

An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.

▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED

yonyou · vendor yonbip · product

DESCRIPTION

An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.