CVEvulnerability
CVE-2023-43154
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-09-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-843
Description
In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during login attempt results in PHP type confusion vulnerability that leads to authentication bypass and takeover of the administrator account.
Affected configurations
• macs cms project macs cms 1.1.4f
Related
Weakness · CWE (1)
- CWE-843 Access of Resource Using Incompatible Type weakness
References
- https://cxsecurity.com/issue/WLB-2023090075 Third Party Advisory
- https://github.com/ally-petitt/macs-cms-auth-bypass Product
- https://cxsecurity.com/issue/WLB-2023090075 Third Party Advisory
- https://github.com/ally-petitt/macs-cms-auth-bypass Product