eosineUnrestricted File Upload Scanner

eosine is a logistics and supply chain management platform used by enterprises to automate cargo handling, distribution, and operational workflows. It reduces manual intervention and improves efficiency in tracking shipments and managing inventory. Companies deploy eosine to streamline logistics processes and cut operational costs.

The Unrestricted File Upload vulnerability occurs when the application fails to properly validate or sanitize file inputs during upload. This allows attackers to upload arbitrary files, including executable scripts, to the server. The flaw typically arises from missing checks on file type, size, or content.

Specifically, the vulnerability is present in the file upload functionality of eosine, where parameters such as 'file' or 'upload' are processed without adequate restrictions. Attackers can exploit this by sending a crafted HTTP request containing a malicious file, such as a PHP web shell, to the vulnerable endpoint.

If exploited, an attacker can execute arbitrary code on the server, leading to full system compromise. This can result in data theft, service disruption, or lateral movement within the network. The high CVSS score of 9.0 reflects the critical risk to confidentiality, integrity, and availability.