Description

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.

Remediation

References

CVE-2023-28330

Related Vulnerabilities

Contao Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-16558)

SugarCRM CVE-2023-35809 Vulnerability (CVE-2023-35809)

MySQL CVE-2016-0606 Vulnerability (CVE-2016-0606)

Drupal Improper Input Validation Vulnerability (CVE-2007-6299)

WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.23)

Severity

Medium

Classification

CVE-2023-28330 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities