Insufficient File Upload Sanitation in HotelDruid by Cezar Varga
CVE-2023-34854

6.6MEDIUM

Key Information:

Vendor

Digitaldruid

Status
Hoteldruid
Vendor
CVE Published:
14 September 2026

What is CVE-2023-34854?

The HotelDruid application, prior to version 3.0.6, exposes a vulnerability that arises from insufficient sanitation of file uploads within its backup and restore functionality. This weakness allows attackers to potentially introduce malicious files into the system, leading to unauthorized access or possible exploitation of the application.

Affected Version(s)

HotelDruid 0 < 3.0.6

References

https://security-tracker.debian.org/tracker/CVE-2023-34854

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.