PT-2023-29023 · Ritecms · Ritecms

Sergio · Publicado 2023-09-28 · Atualizado 2023-09-29 · CVE-2023-43878

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Rite CMS version 3.0

Description The issue allows attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu. This is a result of Multiple Cross-Site scripting (XSS) vulnerabilities.

Recommendations For Rite CMS version 3.0, consider disabling access to the Administration Menu until a patch is available to prevent exploitation of the XSS vulnerabilities. Restrict the ability to add or modify Main Menu Items to minimize the risk of arbitrary code execution.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-43878

Produtos afetados

Ritecms

Referências · 7

• 🔥 https://github.com/sromanhu/RiteCMS-Stored-XSS---MainMenu/blob/main/README.md · Exploit
• https://twitter.com/VulmonFeeds/status/1707439377889005590 · Publicação no Twitter
• https://t.me/cibsecurity/71194 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1707402576516522184 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-43878 · Nota de Segurança
• https://t.me/cvenotify/58709 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-43878 · Aviso do Fabricante