TI-2023-06292 Aliases CVE-2023-6887 GHSA-gq4q-38gx-v325

saysky ForestBlog Image Upload img unrestricted upload

HIGH 75CWE-434Published 2023-12-17 · Updated 2024-08-27

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-434.

Summary

A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248247.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00908 60th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA and NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
saysky	ForestBlog	20220630	—	No fix listed	CNA

ForestBlog Vendorsaysky Affected 20220630 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:forestblog_project:forestblog::::::::	up to 2022-06-30	Vulnerable	Forestblog Project

cpe:2.3:a:forestblog_project:forestblog:*:*:*:*:*:*:*:* Versions up to 2022-06-30 Vulnerable ·Forestblog Project

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-6887
2026-10-03 Alias added: GHSA-gq4q-38gx-v325

References

Exploit 1

https://github.com/daydust/vuln/blob/main/ForestBlog/Arbitrary_File_Upload_Vulnerability.md

TI-2025-02620 Sayski ForestBlog Friend Link cross site scripting CVSS 4.0MEDIUM 5.1
TI-2025-02619 Sayski ForestBlog search cross site scripting CVSS 4.0MEDIUM 5.1
TI-2024-37916 Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker… CVSS 3.1MEDIUM 4.8
TI-2021-21010 In ForestBlog, as of 2021-12-28, File upload can bypass verification. CVSS 3.1CRITICAL 9.8
TI-2020-13496 Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the… CVSS 3.1HIGH 8.8
TI-2022-11590 ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar. CVSS 3.1MEDIUM 6.1

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences