CVE-2023-54405P1CRITICALCVSS 9.8Exploitedv*2026-10-02
CVE-2023-54405 [CRITICAL] CWE-434 CVE-2023-54405: H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an un
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter without restricting path traversal or file type. Attac
nvd