CyberSecBulletin

SmartStar Software vulnerabilities

We track 2 vulnerabilities in SmartStar Software products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2023.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest SmartStar Software vulnerabilities

  • 9.8 Critical severity

    CWS Web-Base: Unrestricted Upload of File with Dangerous Type

    CVE-2023-48376SmartStar Software

    SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary comma

  • 8.8 High severity

    CWS Web-Base: Missing Authorization

    CVE-2023-48375SmartStar Software

    SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privileg