Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

H3C CVM allows unauthenticated file upload

CVE-2023-54405 · published 16 days ago
Summary

The Cloud Virtualization Management part of H3C's CAS platform lets anyone upload files without logging in, and it does not check the file name or type. An attacker could place a malicious web page on the server and run code as the web server user. Apply the vendor's patch or restrict the upload function immediately.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
h3c cvm All versions
Original advisory text
H3C CVM Unauthenticated File Upload via fileUpload/upload Token
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter without restricting path traversal or file type. Attackers can exploit the path traversal in the token parameter to upload a malicious JSP file into a web-accessible directory and then request it to achieve remote code execution as the web-server user. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-434Unrestricted File Upload
Timeline
Published2 Oct 2026
Updated15 Oct 2026
First seen2 Oct 2026
Sources
CVE-2023-54405 · NVD
CVE-2023-54405 · MITRE
Track software like this
Free during beta