Arbitrary file upload in Gladinet Centrestack
CVE-2023-26830
An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server.
Vulnerability class: Unrestricted File Upload
EPSS: 0.011 (61.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Gladinet Centrestack
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2023-26830?
- CVE-2023-26830 is a high-severity vulnerability in Gladinet Centrestack, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 7.2/10. Published 2023-03-31.
- How severe is CVE-2023-26830?
- High severity. CVSS v3 base score is 7.2 out of 10.