CVE-2023-53871

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-53871

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53871.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-53871

Published

2025-12-15T20:28:14Z

Modified

2026-08-12T03:51:32Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic

Details

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

Database specific

{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-434"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53871.json"
}

References

Affected packages

Git / github.com/soosyze/soosyze

Affected ranges

Type

GIT

Repo

https://github.com/soosyze/soosyze

Events

Introduced

8c269a00542f41e153b14e282cacfaefeef1fde4

Last Affected

8c269a00542f41e153b14e282cacfaefeef1fde4

Database specific

Show details

{
    "cpe": "cpe:2.3:a:soosyze:soosyze:2.0.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.0.0"
        },
        {
            "last_affected": "2.0.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ]
}

Affected versions

2.*

2.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53871.json"