Lucene search
PRIOn knowledge basePRION:CVE-2023-47271HistoryNov 06, 2023 - 12:15 a.m.
Design/Logic Flaw
2023-11-0600:15:00
PRIOn knowledge base
www.prio-n.com
2
pkp-wal
open journal systems
xml document
native import/export plugin
image file
issue cover image
logic flaw
unauthorized file execution
PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pkp_web_application_library | eq | < 3.3.0-16 |
Related
osv
osv
CVE-2023-47271
2023-11-06 00:15:09
packetstorm
packetstorm
PKP-WAL 3.4.0-3 Remote Code Execution
2023-12-15 00:00:00
nvd
nvd
CVE-2023-47271
2023-11-06 00:15:09
cvelist
cvelist
CVE-2023-47271
2023-11-05 00:00:00
zdt
zdt
PKP-WAL 3.4.0-3 Remote Code Execution Exploit
2023-12-18 00:00:00
cve
cve
CVE-2023-47271
2023-11-06 00:15:09