CVE-2023-42398

2023-09-1500:00:00

mitre

www.cve.org

zzcms v.2023

remote code execution

sensitive information disclosure

ueditor component

controller.php

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.1%

JSON

An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php.

References

github.com/laterfuture/php-audit/blob/main/CVE-2023-42398%E2%80%94%E2%80%94ZZCMS2023%20SSRF