github.com
https://github.com/unilogies/bumsys/commit/1b426f58a513194206d0ea8ab58baf1461e54978 CVE-2023-2554
HIGH
External Control of File Name or Path in unilogies/bumsys
Record summary
CVE-2023-2554 has a selected CVSS score of 7.2 (high).
Description
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 29, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
unilogies/bumsysBrowse unilogies / unilogies/bumsys | CVE List | Before 2.2.0 | affected |
References
3huntr.dev
https://huntr.dev/bounties/396785a0-7bb6-4db4-b4cb-607b0fd4ab4b nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-2554