CVE-2023-43154

Katalog CVE

CVSS 9.8 · Critical EPSS 1,2%

Kerentanan Access of Resource Using Incompatible Type ('Type Confusion') pada macs cms project macs cms. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during login attempt results in PHP type confusion vulnerability that leads to authentication bypass and takeover of the administrator account.

Rincian

Terbit di NVD

27 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 68,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cxsecurity.com/issue/WLB-2023090075 advisory pihak ketiga
• https://github.com/ally-petitt/macs-cms-auth-bypass product