CVE-2023-0265

PoC —

CVSS 3.1

8.8 high

EPSS

2%p74

Published

Apr 4, 2023 (Apr 4, 2023)

Modified

Jun 17, 2026

Description

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers.

Vendors: uvdesk
Products: community-skeleton
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.