CVE-2023-28291CWE-20

Raw Image Extension Remote Code Execution Vulnerability

High · published April 11, 2023

CVSS v3.1

8.4

EPSS

1%

Percentile

48.9

In the wild

Unconfirmed

What it is

Raw Image Extension Remote Code Execution Vulnerability

The record

Technical detail

CVSS v3.1: 8.4 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.00617 · 48.9th percentile
Weakness: CWE-20 · Improper Input Validation
Published: 2023-04-11T19:13Z

EPSS history

Timeline

11 APR 19:13Z
Raw Image Extension Remote Code Execution Vulnerability
cvelistv5