CVE-2023-33253

CVE-2023-33253 is a remote code execution vulnerability affecting LabCollector versions 6.0 through 6.15. It allows an authenticated, low-privileged user to upload and execute malicious PHP files by exploiting insufficient file validation in the message function. With a CVSS score of 8.8 (HIGH), this vulnerability presents a significant risk, enabling complete compromise of confidentiality, integrity, and availability with low attack complexity and no user interaction required. While there is no evidence of active exploitation, public exploit code, or significant community discussion, its high EPSS and FAUCET scores indicate a substantial potential for future exploitation.