Lucene search

[email protected]CVE-2023-43278

HistorySep 25, 2023 - 11:15 p.m.

CVE-2023-43278

2023-09-2523:15:10

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-43278

csrf

admin_manager.php

seacms

security vulnerability

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

21.8%

JSON

A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account.

CPENameOperatorVersion
seacms:seacmsseacmsle12.8
seacms:seacmsseacmseq6.28
seacms:seacmsseacmseq3.4
seacms:seacmsseacmseq5.89
seacms:seacmsseacmseq8.7
seacms:seacmsseacmseq6.61
seacms:seacmsseacmseq6.4
seacms:seacmsseacmseq6.67
seacms:seacmsseacmseq5.73
seacms:seacmsseacmseq3.8

CPE	Name	Operator	Version
seacms:seacms	seacms	le	12.8
seacms:seacms	seacms	eq	6.28
seacms:seacms	seacms	eq	3.4
seacms:seacms	seacms	eq	5.89
seacms:seacms	seacms	eq	8.7
seacms:seacms	seacms	eq	6.61
seacms:seacms	seacms	eq	6.4
seacms:seacms	seacms	eq	6.67
seacms:seacms	seacms	eq	5.73
seacms:seacms	seacms	eq	3.8

Rows per page:

1-10 of 1381

References

seacms.com

blog.csdn.net/sugaryzheng/article/details/133283101?spm=1001.2014.3001.5501

www.seacms.net/

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

21.8%

JSON

Related for CVE-2023-43278

prion1