Lucene search

K
cveMitreCVE-2023-39834
HistoryAug 24, 2023 - 6:15 p.m.

CVE-2023-39834

2023-08-2418:15:07
CWE-77
mitre
web.nvd.nist.gov
92
pbootcms
v3.2.0
command injection
vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

64.4%

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.

Affected configurations

Nvd
Node
pbootcmspbootcmsRange<3.2.0
VendorProductVersionCPE
pbootcmspbootcms*cpe:2.3:a:pbootcms:pbootcms:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

64.4%

Related for CVE-2023-39834