CVE-2023-26817: Code Injection
Published Apr 7, 2023
·Updated
codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the component /controllers/api/user.php.
Affected Software
1 affected component
PGYER codefever<2023-02-07
Event History
Apr 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-26817?
The severity of CVE-2023-26817 is high.
2
What is the vulnerability type of CVE-2023-26817?
CVE-2023-26817 is a remote code execution (RCE) vulnerability.
3
Which component is affected by CVE-2023-26817?
CVE-2023-26817 affects the component /controllers/api/user.php.
4
How can I fix CVE-2023-26817?
To fix CVE-2023-26817, update codefever to version 2023.2.7-commit-b1c2e7f or newer.
5
Where can I find more information about CVE-2023-26817?
More information about CVE-2023-26817 can be found at the following reference: https://github.com/PGYER/codefever/issues/140