VYPR
← All advisories
High severity7.2NVD Advisory· Published Apr 5, 2023· Updated Jun 17, 2026

CVE-2023-0670

CVE-2023-0670

Description

Ulearn version a5a7ca20de859051ea0470542844980a66dfc05d allows an attacker with administrator permissions to obtain remote code execution on the server through the image upload functionality. This occurs because the application does not validate that the uploaded image is actually an image.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Ulearn/Ulearndescription
  • Ulearn Project/Ulearn
    cpe:2.3:a:ulearn_project:ulearn:-:*:*:*:*:*:*:*
  • Ulearn/Ulearnllm-create
    Range: a5a7ca20de859051ea0470542844980a66dfc05d

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.