CVE-2023-27812: Path Traversal
Published Apr 13, 2023
·Updated
bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the deletefile() function.
Affected Software
2 affected components
bloofox bloofox=0.5.2
bloofox bloofoxCMS=0.5.2
Event History
Apr 13, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-27812?
CVE-2023-27812 is an arbitrary file deletion vulnerability discovered in bloofox v0.5.2.
2
How severe is CVE-2023-27812?
CVE-2023-27812 has a severity rating of 9.1, which is classified as critical.
3
How does CVE-2023-27812 affect bloofox?
CVE-2023-27812 affects bloofox v0.5.2, allowing arbitrary file deletion via the delete_file() function.
4
Is there a fix for CVE-2023-27812?
At this time, there is no known fix or patch for CVE-2023-27812. It is recommended to update to a secure version or to implement mitigations as advised by the vendor or security experts.
5
What is the Common Weakness Enumeration (CWE) for CVE-2023-27812?
The Common Weakness Enumeration (CWE) for CVE-2023-27812 is CWE-22.