Lucene search

MitreCVE-2023-44080

HistorySep 27, 2023 - 10:15 p.m.

CVE-2023-44080

2023-09-2722:15:11

CWE-78

mitre

web.nvd.nist.gov

cve-2023

pgyer

codefever

remote attacker

arbitrary code

crafted request

branchlist component

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

71.4%

JSON

An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component.

Affected configurations

Nvd

Node

pgyercodefeverMatch2023.8.14-2ce4006

VendorProductVersionCPE
pgyercodefever2023.8.14-2ce4006cpe:2.3:a:pgyer:codefever:2023.8.14-2ce4006:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pgyer	codefever	2023.8.14-2ce4006	cpe:2.3:a:pgyer:codefever:2023.8.14-2ce4006:::::::*

References

gist.github.com/one-pyy/330548f740415dff49f59d56e14b4219

github.com/advisories/GHSA-cjp8-pj2w-v99h

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

71.4%

JSON

Related for CVE-2023-44080