CVE-2023-3643
Boss Mini document file inclusion
- State
- Published
- Severity
- 7.3 High
- Published
- Jul 12, 2023
- Updated
- Aug 2, 2024
- Reserved
- Jul 12, 2023
Description
A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233889 was assigned to this vulnerability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.3 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 3.0 | 7.3 High | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 2.0 | 7.5 High | AV:N/AC:L/Au:N/C:P/I:P/A:P | VulDB |
Weaknesses
- CWE-73 File Inclusion
Affected Products
| Product | Versions |
|---|---|
Boss Minin/a |
|
References
- https://vuldb.com/?id.233889vdb-entrytechnical-description
- https://vuldb.com/?ctiid.233889signaturepermissions-required
- https://drive.google.com/file/d/1RXmDUAjqZvWSvHUrfRerz7My6M3KX7YG/viewexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.