← All advisories

High severity7.5NVD Advisory· Published Mar 3, 2023· Updated Jun 17, 2026

CVE-2023-25402

CVE-2023-25402

Description

CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

CleverStupidDog/yf-examdescription
CleverStupidDog/yf-examllm-fuzzy
Range: =1.8.0

Patches

Vulnerability mechanics

References

2

github.com/CleverStupidDog/yf-exam/issues/1nvdExploitIssue TrackingThird Party Advisory
github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-25402nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.