CVE-2023-38388: WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability
Published Mar 26, 2024
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from n/a through 3.3.5.
Affected Software
3 affected components
Artbees Jupiter X Core Wordpress<3.3.8
Artbees JupiterX Core<=3.3.5
WordPress Jupiter X Core<=3.3.5
Remediation
Information
Update to 3.3.8 or a higher version.
Event History
Mar 26, 2024
CVE Published
via MITRE·08:39 PM
Data Sourced
via MITRE·08:39 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-38388?
CVE-2023-38388 is classified as a critical vulnerability due to the risk of arbitrary file uploads.
2
How do I fix CVE-2023-38388?
To fix CVE-2023-38388, update the Artbees JupiterX Core to version 3.3.6 or later.
3
What is the impact of CVE-2023-38388?
The impact of CVE-2023-38388 includes the potential for attackers to upload malicious files, leading to remote code execution.
4
Which versions are affected by CVE-2023-38388?
CVE-2023-38388 affects all versions of Artbees JupiterX Core up to and including version 3.3.5.
5
Is my site at risk if I use JupiterX Core?
If you're using an affected version of JupiterX Core, your site is at significant risk of exploitation from CVE-2023-38388.