CVE-2023-7040

Summary

CVE-2023-7040 is a newly disclosed vulnerability affecting the codelyfe Stupid Simple CMS version 1.2.4. The issue lies in the /file-manager/rename.php file, where an unknown functionality can be exploited through path traversal. By manipulating the argument oldName, an attacker can access files outside of the intended directory ('../filedir'). This vulnerability poses a remote threat and has been made public, increasing the risk of exploitation. The Vulnerability Database (VDB) has assigned the identifier VDB-248689 to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.