CVE-2023-6308
MEDIUMFour-faith Video Surveillance Management System - Unrestricted File Upload
Title source: ruleDescription
A vulnerability, which was classified as critical, has been found in Xiamen Four-Faith Video Surveillance Management System 2016/2017. Affected by this issue is some unknown functionality of the component Apache Struts. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-246134 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References (3)
Core 3
Core References
Third Party Advisory vdb-entry
https://vuldb.com/?id.246134
Third Party Advisory signature
permissions-required
https://vuldb.com/?ctiid.246134
Scores
CVSS v3
6.3
EPSS
0.0026
EPSS Percentile
49.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-434
Status
published
Products (2)
four-faith/video_surveillance_management_system
2016
four-faith/video_surveillance_management_system
2017
Published
Nov 27, 2023
Tracked Since
Feb 18, 2026