CVE-2020-23138

Katalog CVE

CVSS 9.8 · Critical EPSS 1,3%

Kerentanan Unrestricted Upload of File with Dangerous Type pada microweber. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An unrestricted file upload vulnerability was discovered in the Microweber 1.1.18 admin account page. An attacker can upload PHP code or any extension (eg- .exe) to the web server by providing image data and the image/jpeg content type with a .php extension.

Rincian

Terbit di NVD

9 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/virendratiwari03/0918aaba97eba31666630996ab3aeec3 advisory pihak ketiga
• https://gist.github.com/virendratiwari03/800f96271f22c0c2f5aea126c7f1f170 advisory pihak ketiga