CVE-2023-1683

A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown functionality of the file /dayrui/Fcms/View/system_log.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224240.
References
Link Resource
https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.224240 Permissions Required Third Party Advisory
https://vuldb.com/?id.224240 Permissions Required Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:xunruicms:xunruicms:4.6.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-03-29 01:15

Updated : 2024-05-17 02:18


NVD link : CVE-2023-1683

Mitre link : CVE-2023-1683

CVE.ORG link : CVE-2023-1683


JSON object : View

Products Affected

xunruicms

  • xunruicms
CWE
CWE-312

Cleartext Storage of Sensitive Information

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor