What is GHSA-949j-r9x2-w58x?

GHSA-949j-r9x2-w58x is a security advisory published by GitHub Security Advisories with Critical severity. An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to...

Which CVE IDs does GHSA-949j-r9x2-w58x cover?

GHSA-949j-r9x2-w58x covers the following CVE IDs: CVE-2023-27168. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-949j-r9x2-w58x?

GHSA-949j-r9x2-w58x has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-949j-r9x2-w58xCriticalCVSS 9.8

An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to...

Vendor

GitHub Security Advisories

Published

January 19, 2024

Last Modified

September 16, 2026

🔗 CVE IDs covered (1)

CVE-2023-27168 →

📋 Description

An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2023-27168
https://balwurk.com
https://writeback4t.com
https://www.xpand-it.com
https://balwurk.github.io/CVE-2023-27168
https://ghostline.neocities.org/CVE-2023-27168
https://github.com/advisories/GHSA-949j-r9x2-w58x