High severity8.8NVD Advisory· Published Dec 15, 2023· Updated Jun 17, 2026
CVE-2023-48394
CVE-2023-48394
Description
Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2_1_0_19
Patches
Vulnerability mechanics
References
1- www.twcert.org.tw/tw/cp-132-7624-d0300-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.