CVE-2023-1728criticalCWE-434

CVE-2023-1728: critical vulnerability in Fernus Informatics LMS

Unrestricted Upload of File with Dangerous Type in Fernus LMS

Published · Updated

Follow this CVE+ Monitor LMS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.4%
Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection. This issue affects LMS: before 23.04.03.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Fernus Informatics · LMS