PT-2023-22618 · Cltphp · Cltphp

CVE-2023-30268 · Publicado 2023-05-04 · Atualizado 2023-05-10

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CLTPHP versions prior to 6.1

Description The issue is related to improper input validation.

Recommendations For versions prior to 6.1, update to version 6.1 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-30268

Produtos afetados

Cltphp

Referências · 4

• https://t.me/cibsecurity/63336 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-30268 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-30268 · Aviso do Fabricante
• https://gist.github.com/HuBenLab/16dc2f87f91a6f8c60eefce5abf18c08 · Nota