PT-2023-16811 · Fastcms · Fastcms

Ha1Yuyiqiyin + 1 · Published 2023-03-06 · Updated 2024-05-17 · CVE-2023-1191

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions fastcms (affected versions not specified)

Description A problematic vulnerability has been found in fastcms, affecting an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal, and it is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-1191

Affected Products

Fastcms

References · 7

• 🔥 https://github.com/my-fastcms/fastcms/issues/1 · Exploit
• 🔥 https://github.com/ha1yuYiqiyinHangzhouTechn0logy/fastcms/blob/main/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1191 · Security Note
• https://t.me/cibsecurity/59463 · Telegram Post
• https://vuldb.com/?ctiid.222363 · Note
• https://t.me/cvenotify/45578 · Telegram Post
• https://vuldb.com/?id.222363 · Note