CVE-2018-19423 File upload in n/a

What is CVE-2018-19423?

CVE-2018-19423 is a high-severity vulnerability in n/a, published on 21 Nov 2018. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.

Weakness: CWE-434

Which versions are affected by CVE-2018-19423?

It affects 1 product.

Products include Codiad Codiad.

How do I fix CVE-2018-19423?

No fix has been published for CVE-2018-19423 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-19423 being exploited?

There is no known exploitation of CVE-2018-19423 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2019-19208 Code injection in codiad Critical 9.8
• CVE-2018-14009 Codiad remote code execution vulnerability Critical 9.8
• CVE-2017-11366 Codiad Vulnerable to Shell Command Injection Critical 9.8
• CVE-2020-14043 Codiad CSRF Vulnerability High 8.8
• CVE-2020-23355 Codiad Vulnerable to PHP Magic Hash Vulnerability High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-x4c6-q57w-ffwg.