CVE-2023-51925

Critical · CVSS 9.8

YonBIP (Yonyou BIP) — Arbitrary File Upload leading to Remote Code Execution (RCE)

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: other; CWE-434, CWE-434

Description

An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.

Search profile — drives PoC discovery

Symbols nccloud.web.arcp.taskmonitor.action.ArcpUploadActiondoActionArcpUploadActionnccloud.web.arcp.taskmonitor.actionarcp.taskmonitor

Keywords CVE-2023-51925YonBIPYonBIP v3_23.05ArcpUploadActionarbitrary file uploadYonyou BIP RCEnccloud arcp uploadYonBIP file upload vulnerability

Versions: v3_23.05

References

https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51925.txt
https://www.yonyou.com/
http://yonbip.com
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51925.txt
https://www.yonyou.com/

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T00:30:39.000Z