PT-2023-26558

CVE-2023-38693

Published

2023-08-15

Updated

2025-03-06

Description by

CVSS 3.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lucee versions prior to 5.4.3.2 Lucee versions prior to 5.3.12.1

Description A security flaw has been discovered in Lucee, impacting all prior releases. New releases (5.4.3.2, 5.3.12.1) have been made to address the issue and enhance security.

Recommendations For versions prior to 5.4.3.2, update to version 5.4.3.2 to resolve the issue. For versions prior to 5.3.12.1, update to version 5.3.12.1 to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Rootxharsh

Vendors

Affected products

Weakness enumeration

CWE-611: Improper Restriction of XML External Entity Reference

Related identifiers

CVE-2023-38693