CVE-2023-29919

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

60.22% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-276

Published

2023-05-23

Updated

2025-01-17

Proof-of-concept exploits (1)

• xiaosed/CVE-2023-299190★ · 2023-05-19

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29919.yaml

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2023/CVE-2023-29919.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-29918
• CVE-2023-29922
• CVE-2023-2991
• CVE-2023-29923
• CVE-2023-2990
• CVE-2023-29930