Lucene search

K
nvd[email protected]NVD:CVE-2024-32418
HistoryApr 22, 2024 - 1:15 a.m.

CVE-2024-32418

2024-04-2201:15:47
CWE-284
CWE-269
web.nvd.nist.gov
1
flusity cms
remote code execution
vulnerability
add_addon.php

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0

Percentile

9.0%

An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the add_addon.php component.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-32418