EasyAdmin8 2.0.2.2 File Upload index.html kura hakki ndiyam

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin EasyAdmin8 2.0.2.2. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /admin/index/index.html#/admin/mall.goods/index.html na cikin fayil, File Upload Module na cikin sashi. Ngam manipulation shi kura hakki ndiyam. CWE shidin ka a yi bayani matsala sai ya kai CWE-434. Gaskiya, laifi an fitar da shi 07/20/2023. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2023-3800. Wuro ndiyam na local network ɗin sai a samu kafin wannan hari ya yi nasara. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

3 Goyarwa · 71 Datenpunkte

FurɗeSúgá
07/20/2023 10:23		Gargadi 1/2
08/15/2023 11:15		Gargadi 2/2
08/15/2023 11:23
software_nameEasyAdmin8EasyAdmin8EasyAdmin8
software_version2.0.2.22.0.2.22.0.2.2
software_componentFile Upload ModuleFile Upload ModuleFile Upload Module
software_file/admin/index/index.html#/admin/mall.goods/index.html/admin/index/index.html#/admin/mall.goods/index.html/admin/index/index.html#/admin/mall.goods/index.html
vulnerability_cweCWE-434 (kura hakki ndiyam)CWE-434 (kura hakki ndiyam)CWE-434 (kura hakki ndiyam)
vulnerability_risk222
cvss3_vuldb_acHHH
cvss3_vuldb_prHHH
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iLLL
cvss3_vuldb_aLLL
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
advisory_urlhttps://github.com/wolf-leo/EasyAdmin8/issues/1https://github.com/wolf-leo/EasyAdmin8/issues/1https://github.com/wolf-leo/EasyAdmin8/issues/1
exploit_availability111
exploit_publicity111
exploit_urlhttps://github.com/wolf-leo/EasyAdmin8/issues/1https://github.com/wolf-leo/EasyAdmin8/issues/1https://github.com/wolf-leo/EasyAdmin8/issues/1
source_cveCVE-2023-3800CVE-2023-3800CVE-2023-3800
cna_responsibleVulDBVulDBVulDB
response_summaryThe vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.
advisory_date1689804000 (07/20/2023)1689804000 (07/20/2023)1689804000 (07/20/2023)
cvss2_vuldb_acHHH
cvss2_vuldb_auMMM
cvss2_vuldb_ciPPP
cvss2_vuldb_iiPPP
cvss2_vuldb_aiPPP
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss2_vuldb_avAAA
cvss2_vuldb_rlNDNDND
cvss3_vuldb_avAAA
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore3.73.73.7
cvss2_vuldb_tempscore3.23.23.2
cvss3_vuldb_basescore3.93.93.9
cvss3_vuldb_tempscore3.63.63.6
cvss3_meta_basescore3.93.94.8
cvss3_meta_tempscore3.63.64.7
price_0day$0-$5k$0-$5k$0-$5k
cve_assigned1689804000 (07/20/2023)1689804000 (07/20/2023)
cve_nvd_summaryA vulnerability was found in EasyAdmin8 2.0.2.2. It has been classified as problematic. Affected is an unknown function of the file /admin/index/index.html#/admin/mall.goods/index.html of the component File Upload Module. The manipulation leads to unrestricted upload. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235068. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.A vulnerability was found in EasyAdmin8 2.0.2.2. It has been classified as problematic. Affected is an unknown function of the file /admin/index/index.html#/admin/mall.goods/index.html of the component File Upload Module. The manipulation leads to unrestricted upload. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235068. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
cvss3_nvd_avN
cvss3_nvd_acH
cvss3_nvd_prH
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iH
cvss3_nvd_aH
cvss2_nvd_avA
cvss2_nvd_acH
cvss2_nvd_auM
cvss2_nvd_ciP
cvss2_nvd_iiP
cvss2_nvd_aiP
cvss3_cna_avA
cvss3_cna_acH
cvss3_cna_prH
cvss3_cna_uiN
cvss3_cna_sU
cvss3_cna_cL
cvss3_cna_iL
cvss3_cna_aL
cve_cnaVulDB
cvss2_nvd_basescore3.7
cvss3_nvd_basescore6.6
cvss3_cna_basescore3.9

◂ GurɗoGumtiGada ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!