PT-2023-32602 · Csz Cms · Csz Cms

·

CVE-2023-6302

·

Published

2023-11-27

·

Updated

2024-08-29

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions CSZCMS version 1.3.0
Description A critical issue was found in the File Manager Page component, specifically in the viewstemplates file, leading to permission issues. The attack can be launched remotely. The issue has been publicly disclosed.
Recommendations For CSZCMS version 1.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-6302

Affected Products

Csz Cms