Lucene search

[email protected]NVD:CVE-2022-43030

HistoryNov 14, 2022 - 11:15 p.m.

CVE-2022-43030

2022-11-1423:15:11

CWE-521

[email protected]

web.nvd.nist.gov

siyucms

v6.1.7

remote code execution

thinkpap5 adminlte

content management system

command execution

server privileges

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.045

Percentile

92.5%

JSON

Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background. SIYUCMS is a content management system based on ThinkPaP5 AdminLTE. SIYUCMS has a background command execution vulnerability, which can be used by attackers to gain server privileges

Affected configurations

Nvd

Node

siyucmssiyucmsMatch6.1.7

VendorProductVersionCPE
siyucmssiyucms6.1.7cpe:2.3:a:siyucms:siyucms:6.1.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
siyucms	siyucms	6.1.7	cpe:2.3:a:siyucms:siyucms:6.1.7:::::::*

References

github.com/cai-niao98/siyu

github.com/cai-niao98/siyu/blob/main/README.md

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.045

Percentile

92.5%

JSON

Related for NVD:CVE-2022-43030

cvelist1 prion1 cve1