CVE-2023-1773: Rockoa Configuration File webmainConfig.php code injection

Published Mar 31, 2023

Updated

A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224674 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Rockoa RockOA=2.3.2

Event History

Mar 31, 2023

CVE Published

12:00 PM

Data Sourced

12:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-1773?

CVE-2023-1773 has been declared as critical.

What type of vulnerability is CVE-2023-1773?

CVE-2023-1773 is a code injection vulnerability affecting the Configuration File Handler.

Which software versions are affected by CVE-2023-1773?

CVE-2023-1773 affects Rockoa version 2.3.2.

How can an attacker exploit CVE-2023-1773?

An attacker can exploit CVE-2023-1773 remotely by manipulating the webmainConfig.php file.

How do I fix CVE-2023-1773?

To fix CVE-2023-1773, update Rockoa to a patched version or apply relevant security patches.