Lucene search
GoogleOSV:CVE-2023-40827HistoryAug 28, 2023 - 10:15 p.m.
CVE-2023-40827
2023-08-2822:15:09
Google
osv.dev
3
pf4j
vulnerability
remote-execution
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.7
Confidence
Low
EPSS
0.003
Percentile
70.0%
An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter.
Related
ubuntucve
ubuntucve
CVE-2023-40827
2023-08-28 00:00:00
veracode
veracode
Path Traversal
2023-08-31 05:05:25
prion
prion
Code injection
2023-08-28 22:15:00
nvd
nvd
CVE-2023-40827
2023-08-28 22:15:09
debiancve
debiancve
CVE-2023-40827
2023-08-28 22:15:09
cvelist
cvelist
CVE-2023-40827
2023-08-28 00:00:00
osv
osv
pf4j vulnerable to remote code execution via loadpluginPath parameter
2023-08-29 00:32:04
cve
cve
CVE-2023-40827
2023-08-28 22:15:09
github
github
pf4j vulnerable to remote code execution via loadpluginPath parameter
2023-08-29 00:32:04
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.7
Confidence
Low
EPSS
0.003
Percentile
70.0%
Related for OSV:CVE-2023-40827