What’s Vulnerable › Vulnerabilities

CVE-2023-32637

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-07-25 · updated 2026-06-17
• Weakness: CWE-434

Description

GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server.

Affected products

• Generic Model Organism Database Project GBrowse: all versions

References

• http://gmod.org/wiki/GBrowse
• https://jbrowse.org/jb2/
• https://jvn.jp/en/jp/JVN35897618/
• http://gmod.org/wiki/GBrowse
• https://jbrowse.org/jb2/
• https://jvn.jp/en/jp/JVN35897618/

Get alerted when CVE-2023-32637 or the next vulnerability affects your stack