CVE-2023-27812

CRITICAL

bloofoxcms 0.5.2 - Arbitrary File Deletion via delete_file() Function

Title source: llm

bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file() function.

Core 4

Core References

Not Applicable

Product

Exploit, Issue Tracking, Third Party Advisory

Product

CVSS v3 9.1

EPSS 0.0122

EPSS Percentile 64.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CWE

CWE-22

Status published

Products (1)

bloofox/bloofoxcms 0.5.2

Published Apr 13, 2023

Tracked Since Feb 18, 2026