Lucene search
HistoryMay 17, 2024 - 7:15 a.m.
CVE-2023-32297
cve-2023-32297
lws affiliation
php local file inclusion
path traversal
vulnerability
restricted directory
CVSS3
9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
9.1
Confidence
High
EPSS
0
Percentile
10.5%
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in LWS LWS Affiliation allows PHP Local File Inclusion.This issue affects LWS Affiliation: from n/a through 2.2.6.
Related
cvelist
cvelist
cve
cve
CVE-2023-32297
2024-05-17 07:15:54
CVE-2023-3451
2023-07-26 23:15:10
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-3451
2023-07-26 23:15:10
prion
prion
Open redirect
2023-07-26 23:15:00
wordfence
wordfence
2023’s Critical WordPress Vulnerabilities and How They Work
2024-02-12 19:11:21
CVSS3
9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
9.1
Confidence
High
EPSS
0
Percentile
10.5%
Related for NVD:CVE-2023-32297