CVE-2023-51417

2023-12-2914:15:46

CWE-434

[email protected]

web.nvd.nist.gov

cve-2023-51417

unrestricted file upload

joris van montfort

jvm gutenberg

rich text icons

nvd

vulnerability

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.1%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in Joris van Montfort JVM Gutenberg Rich Text Icons.This issue affects JVM Gutenberg Rich Text Icons: from n/a through 1.2.3.

Affected configurations

Vulners

NVD

Node

joris_van_montfortjvm_gutenberg_rich_text_iconsRange≤1.2.3

CPENameOperatorVersion
jorisvm:jvm_gutenberg_rich_text_iconsjorisvm jvm gutenberg rich text iconsle1.2.3

CPE	Name	Operator	Version
jorisvm:jvm_gutenberg_rich_text_icons	jorisvm jvm gutenberg rich text icons	le	1.2.3

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "jvm-rich-text-icons",
    "product": "JVM Gutenberg Rich Text Icons",
    "vendor": "Joris van Montfort",
    "versions": [
      {
        "changes": [
          {
            "at": "1.2.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.2.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]