CVE-2023-32637

State: Published
Severity: Not scored
Published: Jul 25, 2023
Updated: Oct 23, 2024
Reserved: May 11, 2023

Description

GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
GBrowseGeneric Model Organism Database Project	unspecifiedAffected

References

http://gmod.org/wiki/GBrowse
https://jbrowse.org/jb2/
https://jvn.jp/en/jp/JVN35897618/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.