CVE-2023-0455 HIGH

CVE-2023-0455: Unrestricted Upload of File with Dangerous Type in unilogies/bumsys

Vendor Unilogies
Product unilogies/bumsys
Weakness CWE-434 · Unrestricted file upload
Published January 26, 2023
Last update March 31, 2025
View on NVD All CVEs

CVSS base score

7.6/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta.

Key dates

02Disclosure timeline

January 26, 2023 CVE published
March 31, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-13329 File Uploader for WooCommerce <= 1.0.3 - Unauthenticated Arbitrary File Upload via add-image-data CVE-2024-25034 IBM Planning Analytics file upload CVE-2023-5145 D-Link DAR-7000 licence.php unrestricted upload CVE-2023-5822 Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload CVE-2025-11391 PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload