CVE-2023-1683

A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown functionality of the file /dayrui/Fcms/View/system_log.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224240.
References
Link Resource
https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.224240 Permissions Required Third Party Advisory
https://vuldb.com/?id.224240 Permissions Required Third Party Advisory
https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.224240 Permissions Required Third Party Advisory
https://vuldb.com/?id.224240 Permissions Required Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:xunruicms:xunruicms:4.6.1:*:*:*:*:*:*:*

History

21 Nov 2024, 07:39

Type Values Removed Values Added
References () https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md - Exploit, Third Party Advisory () https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.224240 - Permissions Required, Third Party Advisory () https://vuldb.com/?ctiid.224240 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.224240 - Permissions Required, Third Party Advisory () https://vuldb.com/?id.224240 - Permissions Required, Third Party Advisory
CVSS v2 : 4.0
v3 : 7.5
v2 : 4.0
v3 : 4.3

Information

Published : 2023-03-29 01:15

Updated : 2024-11-21 07:39


NVD link : CVE-2023-1683

Mitre link : CVE-2023-1683

CVE.ORG link : CVE-2023-1683


JSON object : View

Products Affected

xunruicms

  • xunruicms
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-312

Cleartext Storage of Sensitive Information