CVE-2023-41357

HIGH

Galaxy Software Services Corporation Vitals ESP - RCE

Title source: llm
STIX 2.1

Description

Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload and execute scripts onto arbitrary directories to perform arbitrary system operations or disrupt service.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0029
EPSS Percentile 52.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-434
Status published
Products (1)
gss/vitals_enterprise_social_platform < 6.1
Published Nov 03, 2023
Tracked Since Feb 18, 2026