CVE-2023-33831: Command Injection
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-33831?
CVE-2023-33831 is a remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13.
How does CVE-2023-33831 affect FUXA?
CVE-2023-33831 allows attackers to execute arbitrary commands via a crafted POST request to the /api/runscript endpoint of FUXA 1.1.13.
What is the severity of CVE-2023-33831?
The severity of CVE-2023-33831 is critical, with a CVSS score of 9.8.
How can I fix CVE-2023-33831?
To fix CVE-2023-33831, it is recommended to update FUXA to a version that is not affected by the vulnerability.
Is there any additional information available about CVE-2023-33831?
Yes, you can find additional information about CVE-2023-33831 in the following references: [Reference 1](https://nvd.nist.gov/vuln/detail/CVE-2023-33831), [Reference 2](https://github.com/rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831), [Reference 3](https://github.com/advisories/GHSA-r87q-fq37-pvr6).