Lucene search
HistoryMay 28, 2024 - 8:16 p.m.
CVE-2023-46694
vtenext
authentication
file upload
remote command execution
ckeditor
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
7
Confidence
Low
Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote commands. This flaw exists due to the application’s failure to enforce proper authentication controls when accessing the Ckeditor file manager functionality.
References
Related
vulnrichment
vulnrichment
CVE-2023-46694
1976-01-01 00:00:00
cve
cve
CVE-2023-46694
2024-05-28 20:16:20
cvelist
cvelist
CVE-2023-46694
1976-01-01 00:00:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
7
Confidence
Low
Related for NVD:CVE-2023-46694