kaizensecurity / CVE-2023-37790

CVE-2023-37790

Author: KaizenSecurity

Description: Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function.

1. https://nvd.nist.gov/vuln/detail/CVE-2023-37790
2. https://vuldb.com/?id.244831
3. https://debricked.com/vulnerability-database/vulnerability/CVE-2023-37790
4. https://www.tenable.com/cve/CVE-2023-37790