CVE-2023-2552highCWE-352

CVE-2023-2552: falha de alta gravidade em unilogies/bumsys

Cross-Site Request Forgery (CSRF) in unilogies/bumsys

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar unilogies/bumsys

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.4%
Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
unilogies · unilogies/bumsys
CVEs relacionadas — unilogies/bumsys

No mesmo produto, das mais perigosas para as menos.

CVE-2023-2554HIGHExternal Control of File Name or Path in unilogies/bumsysEPSS 29.1%CVE-2023-0455HIGHUnrestricted Upload of File with Dangerous Type in unilogies/bumsysEPSS 5.9%CVE-2023-2551HIGHPHP Remote File Inclusion in unilogies/bumsysEPSS 1.9%CVE-2023-1362HIGHImproper Restriction of Rendered UI Layers or Frames in unilogies/bumsysEPSS 1.4%CVE-2023-2832HIGH SQL Injection in unilogies/bumsysEPSS 0.9%CVE-2023-1361HIGH SQL Injection in unilogies/bumsysEPSS 0.8%