CVE-2023-39681

Summary

CVE-2023-39681 is a newly discovered remote code execution (RCE) vulnerability affecting Cuppa CMS version 1.0. The issue is located at the /Configuration.php file, specifically in the email_outgoing parameter. A carefully crafted payload can trigger this vulnerability and allow an attacker to execute arbitrary code on the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.