CVE-2023-3852
MEDIUM EXPLOITED IN THE WILDOpenRapid RapidCMS <1.3.1 - Unrestricted Upload
Title source: llmDescription
A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/upload.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 4dff387283060961c362d50105ff8da8ea40bcbe. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-235204.
References (4)
Core 4
Core References
Permissions Required, Third Party Advisory vdb-entry
technical-description
https://vuldb.com/?id.235204
Permissions Required, Third Party Advisory signature
permissions-required
https://vuldb.com/?ctiid.235204
Exploit, Issue Tracking, Third Party Advisory exploit
issue-tracking
https://github.com/OpenRapid/rapidcms/issues/1
Scores
CVSS v3
4.7
EPSS
0.0517
EPSS Percentile
89.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Details
VulnCheck KEV
2024-09-18
InTheWild.io
2024-09-18
CWE
CWE-434
Status
published
Products (1)
openrapid/rapidcms
< 1.3.1
Published
Jul 23, 2023
Tracked Since
Feb 18, 2026