Idweb · Idweb · CVE-2023-26578
**Name of the Vulnerable Software and Affected Versions**
IDWeb application version 3.1.013
**Description**
The issue allows authenticated attackers to upload arbitrary files to the web root, including dangerous files such as ASP or ASPX, which can lead to command execution on the affected server.
**Recommendations**
For version 3.1.013, consider restricting access to the file upload functionality until a patch is available. As a temporary workaround, monitor the web root directory for suspicious files and remove them promptly to minimize the risk of exploitation.