Lucene search

K
nvd[email protected]NVD:CVE-2023-51475
HistoryDec 29, 2023 - 2:15 p.m.

CVE-2023-51475

2023-12-2914:15:47
CWE-434
web.nvd.nist.gov
2
unrestricted upload
file type
vulnerability
ioss
wordpress
mlm software

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

39.1%

Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0.

Affected configurations

Nvd
Node
wpmlmsoftwarewp_mlm_unilevelRange4.0wordpress
VendorProductVersionCPE
wpmlmsoftwarewp_mlm_unilevel*cpe:2.3:a:wpmlmsoftware:wp_mlm_unilevel:*:*:*:*:*:wordpress:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

39.1%

Related for NVD:CVE-2023-51475