What is CVE-2023-4988?

CVE-2023-4988 is a medium-severity vulnerability in Bettershop Laiketui, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 6.3/10. Published 2023-09-15.

How severe is CVE-2023-4988?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Arbitrary file upload in Bettershop Laiketui

CVE-2023-4988

A vulnerability, which was classified as problematic, was found in Bettershop LaikeTui. This affects an unknown part of the file index.php?module=system&action=uploadImg. The manipulation of the argument imgFile leads to unrestricted upload. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-239799.

Vulnerability class: Unrestricted File Upload

EPSS: 0.005 (39.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Bettershop Laiketui — versions n/a
Laiketui

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

cna@vuldb.com (technical-description, Third Party Advisory, vdb-entry)
cna@vuldb.com (signature, Permissions Required, Third Party Advisory)

Frequently asked questions

What is CVE-2023-4988?: CVE-2023-4988 is a medium-severity vulnerability in Bettershop Laiketui, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 6.3/10. Published 2023-09-15.
How severe is CVE-2023-4988?: Medium severity. CVSS v3 base score is 6.3 out of 10.