Lucene search
PatchstackCVELIST:CVE-2023-23970HistoryDec 20, 2023 - 7:24 p.m.
CVE-2023-23970 WordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File Upload
2023-12-2019:24:29
CWE-434
Patchstack
www.cve.org
2
wordpress
corsa theme
vulnerability
arbitrary file upload
woorockets
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
19.3%
Unrestricted Upload of File with Dangerous Type vulnerability in WooRockets Corsa.This issue affects Corsa: from n/a through 1.5.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Corsa",
"vendor": "WooRockets",
"versions": [
{
"lessThanOrEqual": "1.5",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2023-23970
2023-12-20 20:15:19
prion
prion
Unrestricted file upload
2023-12-20 20:15:00
cve
cve
CVE-2023-23970
2023-12-20 20:15:19
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
19.3%
Related for CVELIST:CVE-2023-23970