exploitDog

CVE-2023-43871

Опубликовано: 28 сент. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).

Ссылки

https://github.com/sromanhu/CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media/blob/main/README.md
Exploit
Third Party Advisory
https://github.com/sromanhu/WBCE-File-Upload--XSS---Media/blob/main/README.md
Exploit
Third Party Advisory
https://github.com/sromanhu/CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media/blob/main/README.md
Exploit
Third Party Advisory
https://github.com/sromanhu/WBCE-File-Upload--XSS---Media/blob/main/README.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wbce:wbce_cms:1.6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00214

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-jppr-2mcm-r543

CVSS3: 5.4

github

больше 2 лет назад

A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).

EPSS

Процентиль: 44%

0.00214

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79