File Upload Vulnerability in Typecho Version 1.2.1 by Typecho
CVE-2023-36299

8.8HIGH

Key Information:

Vendor

Typecho

Status
Typecho
Vendor
CVE Published:
3 August 2023

What is CVE-2023-36299?

A file upload vulnerability present in Typecho version 1.2.1 allows remote attackers to execute arbitrary code through the manipulation of the upload and options-general parameters in the index.php file. This flaw could enable unauthorized access and pose significant risks to the integrity of the server hosting the affected application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/typecho/typecho/releases/tag/v1.2.1
https://github.com/MentalityXt/typecho-v1.2.1-RCE

EPSS Score

8% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.