{ "id": "CVE-2023-40980", "sourceIdentifier": "cve@mitre.org", "published": "2023-09-01T16:15:08.523", "lastModified": "2023-09-01T21:15:30.513", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file." } ], "metrics": {}, "references": [ { "url": "https://github.com/wkeyuan/DWSurvey/issues/107", "source": "cve@mitre.org" } ] }