CVE-2023-27397

—

CVSS 3.1

9.8 critical

EPSS

<1%p58

Published

May 23, 2023 (May 23, 2023)

Modified

Jun 17, 2026

Description

Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.

Vendors: microengine
Products: mailform
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.