Lucene search
HistoryMay 12, 2023 - 11:15 a.m.
CVE-2023-30130
craftcms
remote code execution
crafted script
section parameter
cve-2023-30130
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.006
Percentile
77.6%
An issue found in CraftCMS v.3.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the Section parameter.
Affected configurations
Node
craftcmscraft_cmsMatch3.8.1
Related
github
github
osv
osv
CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter
2023-05-12 12:30:19
CVE-2023-30130
2023-05-12 11:15:13
cnvd
cnvd
CraftCMS Code Injection Vulnerability
2023-05-17 00:00:00
cvelist
cvelist
CVE-2023-30130
2023-05-12 00:00:00
prion
prion
Design/Logic Flaw
2023-05-12 11:15:00
cve
cve
CVE-2023-30130
2023-05-12 11:15:13
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.006
Percentile
77.6%
Related for NVD:CVE-2023-30130