Lucene search

MitreCVE-2020-36037

HistoryAug 11, 2023 - 2:15 p.m.

CVE-2020-36037

2023-08-1114:15:11

mitre

web.nvd.nist.gov

cve-2020-36037

wuzhicms

remote code execution

security vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

54.8%

JSON

An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting parameter to the ueditor in index.php.

Affected configurations

Nvd

Node

wuzhicmswuzhicmsMatch4.1.0

VendorProductVersionCPE
wuzhicmswuzhicms4.1.0cpe:2.3:a:wuzhicms:wuzhicms:4.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wuzhicms	wuzhicms	4.1.0	cpe:2.3:a:wuzhicms:wuzhicms:4.1.0:::::::*

References

github.com/wuzhicms/wuzhicms/issues/192

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

54.8%

JSON

Related for CVE-2020-36037