CVE-2023-26817

HIGH 8.8EPSS 1.5%

codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the component /controllers/api/user.php.

CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.50% chance of exploitation in the next 30 days, 73th percentile
Published: 2023-04-07
Updated: 2025-02-12

Proof-of-concept exploits (1)

PGYER/codefever/issues/140

References

Related