CVE-2023-5221

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Sep 27, 2023
Updated: Apr 11, 2024
CWE ID 94

Summary

CVE-2023-5221 is a critical vulnerability found in ForU CMS. The vulnerability allows for code injection through manipulation of the argument db_name in the file /install/index.php. This vulnerability can be exploited remotely, and the exploit has been disclosed publicly. The affected and unaffected releases of ForU CMS are unknown due to the product not using versioning. The vendor was informed about the disclosure but did not respond. This vulnerability has a CVSS score of 5.8, with medium base severity and low impacts on integrity and confidentiality. The exploitability score is 1.2, and privileges required for exploitation are high. The attack vector is through the network, and the potential danger to an organization is low availability, confidentiality, and integrity impact due to code injection.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5221 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options