A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224674 is the identifier assigned to this vulnerability.
References
Link | Resource |
---|---|
https://gitee.com/galaxies2580/cve/blob/master/xinhuv2.3.2.md | Permissions Required |
https://vuldb.com/?ctiid.224674 | Third Party Advisory |
https://vuldb.com/?id.224674 | Third Party Advisory |
Configurations
History
06 Apr 2023, 18:23
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
First Time |
Rockoa rockoa
Rockoa |
|
References | (MISC) https://vuldb.com/?ctiid.224674 - Third Party Advisory | |
References | (MISC) https://gitee.com/galaxies2580/cve/blob/master/xinhuv2.3.2.md - Permissions Required | |
References | (MISC) https://vuldb.com/?id.224674 - Third Party Advisory | |
CWE | CWE-94 | |
CPE | cpe:2.3:a:rockoa:rockoa:2.3.2:*:*:*:*:*:*:* |
31 Mar 2023, 12:59
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-03-31 12:15
Updated : 2024-04-11 01:18
NVD link : CVE-2023-1773
Mitre link : CVE-2023-1773
CVE.ORG link : CVE-2023-1773
JSON object : View
Products Affected
rockoa
- rockoa
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')