CVE-2023-53871

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-53871

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53871.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-53871

Published

2025-12-15T21:15:49.543Z

Modified

2026-03-11T22:27:23.418645Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

References

Affected packages

Git / github.com/soosyze/soosyze

Affected ranges

Type

GIT

Repo

https://github.com/soosyze/soosyze

Events

Introduced

Last affected

8c269a00542f41e153b14e282cacfaefeef1fde4

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.0"
        }
    ]
}

Affected versions

1.*

1.0.0

1.0.0-alpha1

1.0.0-alpha2

1.0.0-alpha3

1.0.0-alpha4

1.0.0-alpha4.1

1.0.0-alpha5

1.0.0-alpha6

1.0.0-alpha6.1

1.0.0-alpha7

1.0.0-alpha7.1

1.0.0-alpha8

1.0.0-alpha9

1.0.0-beta1

1.0.0-beta1.1

1.0.0-beta1.2

1.0.0-beta2.1

1.0.0-beta2.2

1.0.0-beta2.3

1.0.0-beta2.4

1.0.0-beta2.5

1.0.1

1.0.2

1.0.3

2.*

2.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53871.json"