Lucene search

K
githubexploit49D576AC-2683-57C3-975A-510DFEBC97AE
HistoryJan 28, 2024 - 11:16 p.m.

Exploit for Deserialization of Untrusted Data in Wpengine Better Search Replace

2024-01-2823:16:53
329
wordpress
better search replace
php object injection
remote code execution
vulnerability analysis
github commits
exploiting php object
wp_html_token

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%

Introduction to CVE-2023-6933 Vulnerability


Descript…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%

Related for 49D576AC-2683-57C3-975A-510DFEBC97AE