PT-2023-16811 · Fastcms · Fastcms

Ha1Yuyiqiyin + 1 · Publicado 2023-03-06 · Atualizado 2024-05-17 · CVE-2023-1191

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions fastcms (affected versions not specified)

Description A problematic vulnerability has been found in fastcms, affecting an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal, and it is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-1191

Produtos afetados

Fastcms

Referências · 7

• 🔥 https://github.com/my-fastcms/fastcms/issues/1 · Exploit
• 🔥 https://github.com/ha1yuYiqiyinHangzhouTechn0logy/fastcms/blob/main/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1191 · Nota de Segurança
• https://t.me/cibsecurity/59463 · Publicação no Telegram
• https://vuldb.com/?ctiid.222363 · Nota
• https://t.me/cvenotify/45578 · Publicação no Telegram
• https://vuldb.com/?id.222363 · Nota