CVE-2023-27812

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-27812
bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file() function.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://bloofox.com Product
https://github.com/jspring996 Not Applicable
https://github.com/jspring996/PHPcodecms/issues/1 Exploit Issue Tracking Third Party Advisory
https://www.bloofox.com/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:bloofox:bloofoxcms:0.5.2:*:*:*:*:*:*:*
History

22 Dec 2023, 20:53

Type Values Removed Values Added
First Time Bloofox bloofoxcms
CPE cpe:2.3:a:bloofox:bloofox:0.5.2:*:*:*:*:*:*:* cpe:2.3:a:bloofox:bloofoxcms:0.5.2:*:*:*:*:*:*:*

21 Apr 2023, 04:18

Type Values Removed Values Added
CWE CWE-22
References (MISC) https://github.com/jspring996 - (MISC) https://github.com/jspring996 - Not Applicable
References (MISC) http://bloofox.com - (MISC) http://bloofox.com - Product
References (MISC) https://github.com/jspring996/PHPcodecms/issues/1 - (MISC) https://github.com/jspring996/PHPcodecms/issues/1 - Exploit, Issue Tracking, Third Party Advisory
References (MISC) https://www.bloofox.com/ - (MISC) https://www.bloofox.com/ - Product
First Time Bloofox
Bloofox bloofox
CPE cpe:2.3:a:bloofox:bloofox:0.5.2:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1

13 Apr 2023, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-04-13 14:15

Updated : 2023-12-22 20:53

NVD link : CVE-2023-27812

Mitre link : CVE-2023-27812

CVE.ORG link : CVE-2023-27812

JSON object : View

Products Affected

bloofox

  • bloofoxcms
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')