Unknown · Tduck-Platform · CVE-2023-37733
**Name of the Vulnerable Software and Affected Versions**
tduck-platform version 4.0
**Description**
The issue allows attackers to execute arbitrary code via a crafted HTML file, exploiting an arbitrary file upload vulnerability.
**Recommendations**
For tduck-platform version 4.0, update to a version that includes a fix for this issue, as the current version allows for arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.