CVE-2023-28458 in pretalx信息

摘要

由 MITRE • 2023-04-21

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2023-03-15

披露

2023-04-21

管理

已接受

条目

VDB-226960

CPE

准备好

CWE

CWE-22 (已确认)

CVSS

4.3 (NVD)

EPSS

0.03457

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2023-28458
NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-28458
CVE Details	https://www.cvedetails.com/cve/CVE-2023-28458/

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!