SmartBI RMIServlet Unrestricted File Upload RCE
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-434.
Summary
SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or usage patterns, attackers can send specially crafted requests that cause the application to perform sensitive operations or execute arbitrary code on the host. The vendor released a fix in July 2023 to address the underlying flaw. VulnCheck has observed this vulnerability being exploited in the wild.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Guangzhou Smart Software Co., Ltd. | SmartBI | V8 to before July 2023 update; V9 to before July 2023 update; V10 to before July 2023 update | July 2023 update | Patch available | CNA |
- SmartBI VendorGuangzhou Smart Software Co., Ltd. Affected V8 to before July 2023 update; V9 to before July 2023 update; V10 to before July 2023 update Fixed in July 2023 update Patch available CNA
Remediation
- Fix · CNA SmartBI (Guangzhou Smart Software Co., Ltd.) Fixed in July 2023 update
Timeline
- 2026-10-02 Threatist record created from CVE-2023-7305
- 2026-10-03 Alias added: GHSA-75gf-3x5v-8fcm
References
Sources
- CVE-2023-7305 · CVE Program
- CVE-2023-7305 · NVD
- FIRST EPSS
- GHSA-75gf-3x5v-8fcm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences