Medium severity5.5NVD Advisory· Published Jul 20, 2023· Updated Jun 17, 2026

CVE-2023-3798

Description

A vulnerability has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 and classified as critical. This vulnerability affects unknown code of the file /App_Resource/UEditor/server/upload.aspx. The manipulation of the argument file leads to unrestricted upload. The exploit has been disclosed to the public and may be used. VDB-235066 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Chengdu Flash Flood Disaster Monitoring and Warning System/Chengdu Flash Flood Disaster Monitoring and Warning Systemllm-fuzzy
Range: = 2.0
Chengdu/Flash Flood Disaster Monitoring and Warning Systemv5
Range: 2.0

Patches

Vulnerability mechanics

References

github.com/RCEraser/cve/blob/main/wanjiang.mdnvdExploitThird Party Advisory
vuldb.comnvdPermissions RequiredThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000