CVE-2023-3800

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jul 20, 2023
Updated: May 17, 2024
CWE ID 352

Summary

CVE-2023-3800 is a newly disclosed vulnerability affecting EasyAdmin8 version 2.0.2.2. This issue is classified as problematic and impacts an unknown function within the File Upload Module's /admin/index/index.html#/admin/mall.goods/index.html file. The exploitation results in an unrestricted upload, with a high complexity for an attacker and a reportedly difficult exploitability. The vulnerability identifier is VDB-235068, and the exploit has been made public. Despite efforts to notify the vendor, they have not responded.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share