Grupposcai · Grupposcai Realgimm · CVE-2023-41638
**Name of the Vulnerable Software and Affected Versions**
GruppoSCAI RealGimm version 1.1.37p38
**Description**
The issue is related to an arbitrary file upload vulnerability in the Gestione Documentale module, which allows attackers to execute arbitrary code by uploading a crafted file.
**Recommendations**
For GruppoSCAI RealGimm version 1.1.37p38, consider restricting access to the Gestione Documentale module to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.