CVE-2023-37756

🗓️ 14 Sep 2023 21:10:15Reported by mitreType

I-doit pro 25 & I-doit open 25 have weak password requirements, enabling bruteforce attacks

Reporter	Title	Published	Views	Family All 4
Vulnrichment	CVE-2023-37756	14 Sep 202300:00	–	vulnrichment
Prion	Code injection	14 Sep 202321:15	–	prion
Cvelist	CVE-2023-37756	14 Sep 202300:00	–	cvelist
NVD	CVE-2023-37756	14 Sep 202321:15	–	nvd

Nvd

Node

i-doit i-doitRange≤25open

i-doit i-doitRange≤25pro

Source	Link
github	www.github.com/leekenghwa/CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below/blob/main/README.md
medium	www.medium.com/%40ray.999/idoit-pro-v25-and-below-weak-password-add-on-upload-to-rce-cve-2023-37756-fa1b18433ca3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Sep 2023 21:15Current

9.3High risk

Vulners AI Score9.3

CVSS39.8

EPSS0.002

CWE-521