CVE-2018-17936

Опубликовано: 27 нояб. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote code execution.

Ссылки

https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02
Mitigation
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nuuo:nuuo_cms:*:*:*:*:*:*:*:*

Версия до 3.3 (включая)

EPSS

Процентиль: 99%

0.67158

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-h329-mq35-h7hv