CVE-2023-32637

Description

GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server.

Reserved 2023-05-11 | Published 2023-07-25 | Updated 2024-10-23 | Assigner jpcert

Problem types

Unrestricted Upload of File with Dangerous Type

Product status

Any version
affected

References

gmod.org/wiki/GBrowse

jbrowse.org/jb2/

jvn.jp/en/jp/JVN35897618/

cve.org (CVE-2023-32637)

nvd.nist.gov (CVE-2023-32637)

Download JSON