CVE-2023-53868

Katalog CVE

CVSS 8.8 · High EPSS 0,85%

Kerentanan Unrestricted Upload of File with Dangerous Type pada coppermine-gallery coppermine photo gallery. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Coppermine Gallery 1.6.25 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the plugin manager. Attackers can upload a zipped PHP file with system commands to the plugin directory and execute arbitrary code by accessing the uploaded plugin script.

Rincian

Terbit di NVD

15 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

0,85% peluang dieksploitasi; lebih tinggi dari 57,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/51738 exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/coppermine-gallery-remote-code-execution-via-plugin-upload advisory pihak ketiga
• https://web.archive.org/web/20240101151648/https://coppermine-gallery.net/ product