PT-2023-23429 · Fuxa · Fuxa

Mateustesser · Publicado 2023-09-21 · Atualizado 2024-09-25 · CVE-2023-31716

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FUXA versions 1.1.12 and earlier

Description The issue is related to a Local File Inclusion vulnerability. It can be exploited via the file parameter, specifically by accessing the fuxa.log file.

Recommendations For versions 1.1.12 and earlier, consider restricting access to the fuxa.log file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-98

Identificadores relacionados

CVE-2023-31716

GHSA-45C3-C4C3-8RQG

Produtos afetados

Fuxa

Referências · 6

• 🔥 https://github.com/MateusTesser/CVE-2023-31716 · Exploit
• https://github.com/frangoteam/FUXA · Nota
• https://osv.dev/vulnerability/CVE-2023-31716 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-31716 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-45c3-c4c3-8rqg · Aviso do Fabricante
• https://t.me/cibsecurity/70939 · Publicação no Telegram