CVE-2023-37790

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2023-11-09

Last modified

2024-09-04

Weaknesses

CWE-79

Affected products

• Clarity (Broadcom)

References

• https://packetstormsecurity.com/files/173508/Clarity-PPM-14.3.0.298-Cross-Site-Scripting.html