First published: Wed Jan 25 2023(Updated: )
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Bloofox Bloofoxcms | =0.5.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2023-23151.
The severity level of CVE-2023-23151 is medium, with a severity value of 6.5.
CVE-2023-23151 affects bloofoxCMS version 0.5.2.1.
CVE-2023-23151 allows an attacker to delete arbitrary files via the component /include/inc_content_media.php in bloofoxCMS.
At this time, there is no available fix for CVE-2023-23151. It is recommended to update to a newer version of bloofoxCMS if one becomes available.