Lucene search

K
cve[email protected]CVE-2023-0947
HistoryFeb 22, 2023 - 1:15 a.m.

CVE-2023-0947

2023-02-2201:15:11
CWE-22
web.nvd.nist.gov
46
cve-2023-0947
path traversal
github repository
flatpressblog
flatpress
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.2%

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.

Affected configurations

NVD
Node
flatpressflatpressRange1.2.1
CPENameOperatorVersion
flatpress:flatpressflatpressle1.2.1

CNA Affected

[
  {
    "vendor": "flatpressblog",
    "product": "flatpressblog/flatpress",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "1.3",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.2%