PT-2023-32602 · Csz Cms · Csz Cms

Testvul · Publicado 2023-11-27 · Atualizado 2024-08-29 · CVE-2023-6302

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CSZCMS version 1.3.0

Description A critical issue was found in the File Manager Page component, specifically in the viewstemplates file, leading to permission issues. The attack can be launched remotely. The issue has been publicly disclosed.

Recommendations For CSZCMS version 1.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

CWE-275

Identificadores relacionados

CVE-2023-6302

Produtos afetados

Csz Cms

Referências · 6

• 🔥 https://github.com/t34t/CVE/blob/main/CSZCMS/Code-Execution-Vulnerability-in-cszcmsV1.3.0.md · Exploit
• https://vuldb.com/?id.246128 · Nota
• https://t.me/cvenotify/92741 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-6302 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-6302 · Nota de Segurança
• https://vuldb.com/?ctiid.246128 · Nota