Lucene search
HistoryJun 15, 2023 - 5:15 p.m.
CVE-2023-34880
cve-2023-34880
path traversal
add_action method
lib admin
local file inclusion
security vulnerability
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
73.8%
cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admin/language_admin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion.
Affected configurations
Node
cmseasycmseasyMatch7.7.7.720230520
Related
prion
prion
Path traversal
2023-06-15 17:15:00
cvelist
cvelist
CVE-2023-34880
2023-06-15 00:00:00
cve
cve
CVE-2023-34880
2023-06-15 17:15:09
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
73.8%
Related for NVD:CVE-2023-34880