exploitDog

CVE-2023-27060

Опубликовано: 22 мар. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function.

Ссылки

https://github.com/eddy8/LightCMS/issues/21
Exploit
Issue Tracking
Patch
https://igml.top/2021/05/10/lightcms-RCE/
Exploit
Third Party Advisory
https://github.com/eddy8/LightCMS/issues/21
Exploit
Issue Tracking
Patch
https://igml.top/2021/05/10/lightcms-RCE/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lightcms_project:lightcms:1.3.7:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01771

Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-306

Связанные уязвимости

GHSA-j658-jwc9-69qv

CVSS3: 9.8

github

почти 3 года назад

LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function.

EPSS

Процентиль: 82%

0.01771

Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-306