PT-2025-51289 · Soosyze · Soosyze

Nu11Secur1Ty · Published 2025-12-15 · Updated 2025-12-30 · CVE-2023-53871

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Soosyze version 2.0.0

Description The application has a file upload issue that permits attackers to upload arbitrary HTML files containing PHP code. This broken file upload mechanism could allow attackers to view sensitive file paths and execute malicious PHP scripts on the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-53871

Affected Products

Soosyze

References · 9

• 🔥 https://exploit-db.com/exploits/51718 · Exploit
• https://osv.dev/vulnerability/CVE-2023-53871 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53871 · Security Note
• https://github.com/soosyze/soosyze · Note
• https://soosyze.com · Note
• https://vulncheck.com/advisories/soosyze-unrestricted-file-upload-via-broken-upload-logic · Note
• https://twitter.com/CVEnew/status/2002857378069569938 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2000758585488228800 · Twitter Post
• https://t.me/cveNotify/147196 · Telegram Post