CVEvulnerability
CVE-2023-1682
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-03-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-425
Description
A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dayrui/My/Config/Install.txt. The manipulation leads to direct request. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224239.
Affected configurations
• xunruicms xunruicms 4.6.1
Related
Weakness · CWE (1)
- CWE-425 Direct Request weakness
References
- https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.224239 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.224239 Third Party Advisory
- https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.224239 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.224239 Third Party Advisory