CVE-2023-27179

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php

High · published April 11, 2023

Patch now

High probability of exploitation

CVSS calls it high at 7.5. It sits in the 99.2th percentile for exploit probability.

CVSS v3.1

7.5

EPSS

61%

Percentile

99.2

In the wild

Unconfirmed

What it is

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.60793 · 99.2th percentile
Published: 2023-04-11T00:00Z

EPSS history

Timeline

11 APR 00:00Z
GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php
cvelistv5