PT-2023-25038 · Ujcms · Ujcms

Sma11New · Publicado 2023-06-14 · Atualizado 2025-01-03 · CVE-2023-34865

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ujcms version 6.0.2

Description The issue allows attackers to perform directory traversal, enabling them to move files using the rename feature.

Recommendations For ujcms version 6.0.2, consider restricting the rename feature to prevent file movement until a patch is available.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-34865

Produtos afetados

Ujcms

Referências · 5

• 🔥 https://github.com/ujcms/ujcms/issues/5 · Exploit
• https://osv.dev/vulnerability/CVE-2023-34865 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-34865 · Nota de Segurança
• https://t.me/cibsecurity/65233 · Publicação no Telegram
• https://t.me/cvenotify/106156 · Publicação no Telegram