Lucene search

MitreCVE-2023-30269

HistoryApr 26, 2023 - 2:15 p.m.

CVE-2023-30269

2023-04-2614:15:09

CWE-20

mitre

web.nvd.nist.gov

cve-2023-30269

cltphp

vulnerability

input validation

nvd

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.

Affected configurations

Nvd

Node

cltphpcltphpRange≤6.0

VendorProductVersionCPE
cltphpcltphp*cpe:2.3:a:cltphp:cltphp:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cltphp	cltphp	*	cpe:2.3:a:cltphp:cltphp::::::::

References

gist.github.com/HuBenLab/f5eb8ebbba20c835a3170d392c9e46a4

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

Related for CVE-2023-30269