Lucene search
HistoryJun 13, 2024 - 5:15 a.m.
CVE-2024-38294
alcasar
email registration
remote code execution
vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
38.9%
ALCASAR before 3.6.1 allows email_registration_back.php remote code execution.
Affected configurations
Node
alcasaralcasarRange<3.6.1
Related
cve
cve
CVE-2024-38294
2024-06-13 05:15:50
cvelist
cvelist
CVE-2024-38294
2024-06-13 00:00:00
vulnrichment
vulnrichment
CVE-2024-38294
2024-06-13 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
38.9%
Related for NVD:CVE-2024-38294