VYPR
← All advisories
Unrated severityOSV Advisory· Published Dec 15, 2025· Updated Apr 7, 2026

Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic

CVE-2023-53871

Description

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Soosyze/SoosyzeOSV2 versions
    1.0.0, 1.0.0-alpha1, 1.0.0-alpha2, …+ 1 more
    • (no CPE)range: 1.0.0, 1.0.0-alpha1, 1.0.0-alpha2, …
    • (no CPE)range: = 2.0.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.