CVE-2023-37645: Medium severity Eyoucms Eyoucms vulnerability
Published Jul 20, 2023
·Updated
eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custommodelpath/recruit.filelist.txt.
Affected Software
1 affected component
Eyoucms Eyoucms=1.6.3
Event History
Jul 20, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-37645?
CVE-2023-37645 is an information disclosure vulnerability discovered in eyoucms v1.6.3.
2
How does CVE-2023-37645 affect eyoucms?
CVE-2023-37645 affects eyoucms v1.6.3 by allowing an attacker to disclose sensitive information through the /custom_model_path/recruit.filelist.txt component.
3
How severe is CVE-2023-37645?
CVE-2023-37645 has a severity score of 5.3, which is considered medium.
4
How can I fix CVE-2023-37645?
To fix CVE-2023-37645, update eyoucms to version 1.6.4 or higher.
5
Where can I find more information about CVE-2023-37645?
You can find more information about CVE-2023-37645 at this link: [https://github.com/weng-xianhu/eyoucms/issues/50](https://github.com/weng-xianhu/eyoucms/issues/50)