CVE-2023-5790: remyandrade file_manager_app
Vulnerability summary
CVE-2023-5790 is a critical (CVSS 9.8) vulnerability in remyandrade file_manager_app. EPSS estimates a 0.78% chance of exploitation in the next 30 days, higher than 55.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 26-10-2023PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
A vulnerability classified as critical was found in SourceCodester File Manager App 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-file.php. The manipulation of the argument uploadedFileName leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243595.
CVSS metrics
5 scores · 2 sources · 3 versions- CVE.orgCNA6.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LDiffers
- NVDNIST6.5MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS trend
Probability
0.78%
Chance of exploitation in the next 30 days
Percentile
55%
Versus all other CVEs
30-day change
0.00 pp
From 0.78% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundCve Hub
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Remyandrade1 product
Sourcecodester1 product
2 vendors · 2 products
References
3 links- github.com/Yp1oneer/cve_hub/blob/main/File%20Manager%20App/Unrestricted%20File%20Upload.pdfExploitThird Party Advisory