Lucene search

MitreCVE-2023-36255

HistoryAug 03, 2023 - 2:15 a.m.

CVE-2023-36255

2023-08-0302:15:09

CWE-94

mitre

web.nvd.nist.gov

eramba

limited

enterprise

community

remote attacker

arbitrary code execution

cve-2023-36255

url parameter vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.006

Percentile

79.5%

JSON

An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitrary code via the path parameter in the URL.

Affected configurations

Nvd

Node

erambaerambaMatch3.19.1

VendorProductVersionCPE
erambaeramba3.19.1cpe:2.3:a:eramba:eramba:3.19.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
eramba	eramba	3.19.1	cpe:2.3:a:eramba:eramba:3.19.1:::::::*

References

eramba.com

trovent.github.io/security-advisories/TRSA-2303-01/TRSA-2303-01.txt

trovent.io/security-advisory-2303-01/

www.eramba.org

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.006

Percentile

79.5%

JSON

Related for CVE-2023-36255