Описание
WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editing permissions to execute arbitrary code. Attackers can exploit the language installation endpoint by manipulating language installation parameters to achieve remote code execution on the server.
Ссылки
- Product
- ExploitVDB Entry
- Third Party Advisory
- ExploitVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:websitebaker:websitebaker:2.13.0:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00293
Низкий
8.8 High
CVSS3
Дефекты
CWE-434
Связанные уязвимости
CVSS3: 8.8
github
23 дня назад
WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editing permissions to execute arbitrary code. Attackers can exploit the language installation endpoint by manipulating language installation parameters to achieve remote code execution on the server.
EPSS
Процентиль: 52%
0.00293
Низкий
8.8 High
CVSS3
Дефекты
CWE-434