CVE-2023-6723 CRITICAL

CVE-2023-6723: Unrestricted Upload of File with Dangerous Type in Repox

Vendor Repox
Product Repox
Weakness CWE-434 · Unrestricted file upload
Published December 13, 2023
Last update May 22, 2025

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.

Key dates

02Disclosure timeline

December 13, 2023 CVE published
May 22, 2025 Record updated