Critical severity9.8NVD Advisory· Published May 1, 2023· Updated Jun 17, 2026

CVE-2023-29635

Description

File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Antabot White Jotter Project/Antabot White Jotter
cpe:2.3:a:antabot_white-jotter_project:antabot_white-jotter:0.2.2:*:*:*:*:*:*:*
Antabot/White Jottercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =0.2.2

Patches

Vulnerability mechanics

References

github.com/Antabot/White-Jotter/blob/c1c5d66fda090b986b8f46a7132d403e3b038c5d/wj/src/main/java/com/gm/wj/controller/LibraryController.javanvdPatch
github.com/Antabot/White-Jotter/issues/157nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000