Lucene search
HistoryJun 15, 2023 - 5:15 p.m.
CVE-2023-34880
cmseasy
v7.7.7.7
20230520
path traversal
vulnerability
lib/admin/language_admin.php
add_action
arbitrary code
local file inclusion
cve-2023-34880
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
73.8%
cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admin/language_admin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion.
Affected configurations
Node
cmseasycmseasyMatch7.7.7.720230520
| CPE | Name | Operator | Version |
|---|---|---|---|
| cmseasy:cmseasy | cmseasy | eq | 7.7.7.7 |
Related
nvd
nvd
CVE-2023-34880
2023-06-15 17:15:09
prion
prion
Path traversal
2023-06-15 17:15:00
cvelist
cvelist
CVE-2023-34880
2023-06-15 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
73.8%
Related for CVE-2023-34880