← All advisories

Medium severity5.4NVD Advisory· Published Nov 9, 2023· Updated Jun 17, 2026

CVE-2023-37790

CVE-2023-37790

Description

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function.

Affected products

2

Jaspersoft/Clarity PPMdescription
Jaspersoft/Clarity PPMllm-fuzzy
Range: = 14.3.0.298

Patches

Vulnerability mechanics

References

1

packetstormsecurity.com/files/173508/Clarity-PPM-14.3.0.298-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.