{"id":"CVE-2023-6723","aliases":["EUVD-2023-58937","GHSA-qhj9-jqq3-357q"],"status":"published","title":"Unrestricted Upload of File with Dangerous Type in Repox","description":"An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0078,"percentile":0.56199,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2023-12-13T10:10:44Z","modified":"2026-06-17T06:51:18Z","products":[{"vendor":"europeana","product":"repox"},{"vendor":"repox","product":"repox"}],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6723"},{"url":"https://github.com/advisories/GHSA-qhj9-jqq3-357q"}],"sources":{"cve":[{"id":"CVE-2023-6723","title":"Unrestricted Upload of File with Dangerous Type in Repox","description":"An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.","status":"published","published":"2023-12-13T10:10:44.157Z","modified":"2025-05-22T18:17:20.983Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:35:25.469654Z"}],"euvd":[{"id":"EUVD-2023-58937","description":"An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.","status":"published","published":"2023-12-13T10:10:44Z","modified":"2025-05-22T18:17:20Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:39.867081Z"}],"ghsa":[{"id":"GHSA-qhj9-jqq3-357q","title":"An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker...","description":"An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.","status":"published","published":"2023-12-13T12:30:44Z","modified":"2023-12-13T12:30:44Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:55:11.44614Z"}],"nvd":[{"id":"CVE-2023-6723","description":"An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.","status":"published","published":"2023-12-13T11:15:08.04Z","modified":"2026-06-17T06:51:18.203Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:08:54.696438Z"}]}}