Vulnerabilities

TI-2023-22572 CVE-2023-42335 · GHSA-h5vh-xqgr-2q2g

Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37…

HIGH 73

Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01328 Published 2023-09-20 No fix listed CWE-434

TI-2023-22571 CVE-2023-42334 · GHSA-m6jm-f5rm-2629

An Indirect Object Reference (IDOR) in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37…

MEDIUM 62

An Indirect Object Reference (IDOR) in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to escalate privileges via the user parameter.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00782 Published 2023-09-20 No fix listed CWE-639

Vulnerabilities

Filters

Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37…

An Indirect Object Reference (IDOR) in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37…