Lucene search

K
cveMitreCVE-2023-30330
HistoryMay 12, 2023 - 1:15 a.m.

CVE-2023-30330

2023-05-1201:15:09
mitre
web.nvd.nist.gov
21
softexpert
excellence suite
cve-2023-30330
local file inclusion
security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.069

Percentile

93.9%

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php.

Affected configurations

Nvd
Node
softexpertexcellence_suiteRange2.02.1.3
VendorProductVersionCPE
softexpertexcellence_suite*cpe:2.3:a:softexpert:excellence_suite:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.069

Percentile

93.9%