PT-2023-32602 · Csz Cms · Csz Cms

Testvul · Published 2023-11-27 · Updated 2024-08-29 · CVE-2023-6302

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CSZCMS version 1.3.0

Description A critical issue was found in the File Manager Page component, specifically in the viewstemplates file, leading to permission issues. The attack can be launched remotely. The issue has been publicly disclosed.

Recommendations For CSZCMS version 1.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Weakness Enumeration

CWE-276

CWE-275

Related Identifiers

CVE-2023-6302

Affected Products

Csz Cms

References · 6

• 🔥 https://github.com/t34t/CVE/blob/main/CSZCMS/Code-Execution-Vulnerability-in-cszcmsV1.3.0.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-6302 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6302 · Security Note
• https://vuldb.com/?id.246128 · Note
• https://t.me/cvenotify/92741 · Telegram Post
• https://vuldb.com/?ctiid.246128 · Note