CVE-2023-3800CWE-434

EasyAdmin8 File Upload Module index.html unrestricted upload

Low · published July 20, 2023

CVSS v3.1
3.9
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

A vulnerability was found in EasyAdmin8 2.0.2.2. It has been classified as problematic. Affected is an unknown function of the file /admin/index/index.html#/admin/mall.goods/index.html of the component File Upload Module. The manipulation leads to unrestricted upload. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235068. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.2th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2023-07-20T23:00Z
EPSS history
Timeline
  • 20 JUL 23:00Z
    EasyAdmin8 File Upload Module index.html unrestricted upload
    cvelistv5