Lucene search
HistoryDec 20, 2023 - 8:15 p.m.
CVE-2023-23970
vulnerability
file upload
woorockets corsa
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.3%
Unrestricted Upload of File with Dangerous Type vulnerability in WooRockets Corsa.This issue affects Corsa: from n/a through 1.5.
Affected configurations
Node
woorocketscorsaRange≤1.5wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| woorockets | corsa | * | cpe:2.3:a:woorockets:corsa:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
prion
prion
Unrestricted file upload
2023-12-20 20:15:00
cve
cve
CVE-2023-23970
2023-12-20 20:15:19
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.3%
Related for NVD:CVE-2023-23970