PT-2023-12080 · Supermicro · Pcmt Supermicro-Cms
CVSS v3.1
4.9
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
pcmt superMicro-CMS version 3.11
Description
An issue was discovered that allows attackers to delete files via a crafted image file in the
images.php file.Recommendations
For pcmt superMicro-CMS version 3.11, consider restricting access to the
images.php file until a patch is available. As a temporary workaround, avoid using the images.php file to minimize the risk of exploitation.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Pcmt Supermicro-Cms