Vulnerabilities > Oxid Esales > Eshop > 6.5.2

DATE CVE VULNERABILITY TITLE RISK
2023-08-02 CVE-2023-38330 Unrestricted Upload of File with Dangerous Type vulnerability in Oxid-Esales Eshop 6.5.0/6.5.2
OXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified headers in the administration area.
network
low complexity
oxid-esales CWE-434
5.3