CVE-2023-43234

Katalog CVE

CVSS 9.8 · Critical EPSS 1,1%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada dedebiz. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filename parameters.

Rincian

Terbit di NVD

27 September 2023

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 65,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/yux1azhengye not applicable
• https://github.com/yux1azhengye/mycve/blob/main/DedeBIZ_v6.2.11_RCE.pdf broken link
• https://www.dedebiz.com product