Unrestricted Upload of File with Dangerous Type Vulnerability

CVE-2023-29386

What is CVE-2023-29386?

The vulnerability in Icomoon Manager allows for unrestricted file uploads, permitting attackers to upload malicious files that can compromise the security of the web application. This flaw affects versions from earlier releases to 2.0. By exploiting this vulnerability, an attacker may plant web shells or other payloads, which could lead to further unauthorized access or control over the affected systems. It is crucial for users of Icomoon Manager to implement security measures to mitigate the risks associated with this issue.

References