PT-2023-30732 · Unknown · Availability Booking Calendar
CVE-2023-48207
·
Publicado
2023-12-06
·
Atualizado
2023-12-11
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Availability Booking Calendar version 5.0
Description
The issue allows CSV injection via the unique ID field in the Reservations list component.
Recommendations
For Availability Booking Calendar version 5.0, consider restricting access to the Reservations list component to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the unique ID field in the Reservations list component.
Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Availability Booking Calendar