exploitDog

CVE-2023-36210

Опубликовано: 01 авг. 2023

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.

Ссылки

https://vulners.com/zdt/1337DAY-ID-38750
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/51499
Exploit
Third Party Advisory
VDB Entry
https://vulners.com/zdt/1337DAY-ID-38750
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/51499
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:motocms:motocms:3.4.3:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.286

Средний

9.8 Critical

CVSS3

Дефекты

CWE-74

Связанные уязвимости

GHSA-255v-grg6-24pg

CVSS3: 9.8

github

почти 3 года назад

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.

EPSS

Процентиль: 98%

0.286

Средний

9.8 Critical

CVSS3

Дефекты

CWE-74