CVE-2023-1744

Опубликовано: 30 мар. 2023

Источник: nvd

CVSS3: 6.3

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

A vulnerability classified as critical was found in IBOS 4.5.5. This vulnerability affects unknown code of the component htaccess Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224632.

Ссылки

https://gitee.com/xieqiangweb/cve/blob/master/cve/IBOS%20oa%20v4.5.5%20upload.md
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.224632
Third Party Advisory
https://vuldb.com/?id.224632
Third Party Advisory
https://gitee.com/xieqiangweb/cve/blob/master/cve/IBOS%20oa%20v4.5.5%20upload.md
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.224632
Third Party Advisory
https://vuldb.com/?id.224632
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibos:ibos:*:*:*:*:*:*:*:*

Версия до 4.5.5 (включая)

EPSS

Процентиль: 28%

0.00098

Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-q4fh-5hgq-7rcc

CVSS3: 8.8

github

почти 3 года назад

EPSS

Процентиль: 28%

0.00098

Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434