Lucene search

[email protected]NVD:CVE-2023-31903

HistoryMay 17, 2023 - 1:15 p.m.

CVE-2023-31903

2023-05-1713:15:09

CWE-434

[email protected]

web.nvd.nist.gov

cve-2023-31903

guppy cms

unrestricted file upload

remote attackers

arbitrary code

php file

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.026

Percentile

90.5%

JSON

GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.

Affected configurations

Nvd

Node

freeguppyguppyMatch6.00.10

VendorProductVersionCPE
freeguppyguppy6.00.10cpe:2.3:a:freeguppy:guppy:6.00.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
freeguppy	guppy	6.00.10	cpe:2.3:a:freeguppy:guppy:6.00.10:::::::*

References

github.com/blue0x1/GuppY-exploit-rce

www.exploit-db.com/exploits/51052

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.026

Percentile

90.5%

JSON

Related for NVD:CVE-2023-31903

cvelist1 prion1 cve1