CVE:CVE-2023-3797
CNNVD:CNNVD-202307-1775
Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System是Suncreate公司的一个山洪灾害预防监测和预警系统。
Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System 20230712及之前版本存在代码问题漏洞，该漏洞源于文件/Duty/AjaxHandle/UploadFloodPlanFileUpdate.ashx的参数Filedata会导致不受限制的上传。
solution:Upgrade istrong four_mountain_torrent_disaster_prevention,_control_monitoring_and_early_warning_system to a higher version than -