CVE-2023-48394 — Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this — CVE Database · The Intelligence Room