CVE-2023-38836

Published August 21st, 2023

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.

BoidCMS/BoidCMS

Flat file CMS for building simple websites and blogs

GitHub

60