CVE-2023-1501 | RockOA 2.3.2 acloudCosAction.php.SQL runAction fileid unrestricted upload

A vulnerability, which was classified as . This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2023-1501. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.