CVE-2023-45188

CVE-2023-45188 is a critical arbitrary file upload vulnerability affecting IBM Engineering Lifecycle Optimization Publishing versions 7.0.2 and 7.0.3, as well as associated Linux and Windows environments. This flaw, stemming from improper file extension validation (CWE-434), allows an unauthenticated remote attacker to upload malicious files and potentially execute arbitrary code on the vulnerable system. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Despite its high severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.