CVE-2023-52325

Katalog CVE

CVSS 7.5 · High EPSS 4,5%

Kerentanan Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') pada trendmicro apex central. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker must first obtain a valid set of credentials on target system in order to exploit this vulnerability.

Rincian

Terbit di NVD

23 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

EPSS (30 hari)

4,5% peluang dieksploitasi; lebih tinggi dari 91,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-24-024/ advisory pihak ketiga · vdb entry