Lucene search

PatchstackCVE-2023-51417

HistoryDec 29, 2023 - 2:15 p.m.

CVE-2023-51417

2023-12-2914:15:46

CWE-434

Patchstack

web.nvd.nist.gov

cve-2023-51417

unrestricted file upload

joris van montfort

jvm gutenberg

rich text icons

nvd

vulnerability

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in Joris van Montfort JVM Gutenberg Rich Text Icons.This issue affects JVM Gutenberg Rich Text Icons: from n/a through 1.2.3.

Affected configurations

Nvd

Vulners

Node

jorisvmjvm_gutenberg_rich_text_iconsRange≤1.2.3wordpress

VendorProductVersionCPE
jorisvmjvm_gutenberg_rich_text_icons*cpe:2.3:a:jorisvm:jvm_gutenberg_rich_text_icons:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
jorisvm	jvm_gutenberg_rich_text_icons	*	cpe:2.3:a:jorisvm:jvm_gutenberg_rich_text_icons::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "jvm-rich-text-icons",
    "product": "JVM Gutenberg Rich Text Icons",
    "vendor": "Joris van Montfort",
    "versions": [
      {
        "changes": [
          {
            "at": "1.2.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.2.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/jvm-rich-text-icons/wordpress-jvm-rich-text-icons-plugin-1-2-3-arbitrary-file-upload-vulnerability?_s_id=cve

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

Related for CVE-2023-51417