CVE-2023-38948: High severity jizhicms vulnerability
Published Aug 3, 2023
·Updated
An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin.
Affected Software
1 affected component
Jizhicms JIZHICMS=1.9.5
Event History
Aug 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
04:15 PM
Description
Frequently Asked Questions
1
What is CVE-2023-38948?
CVE-2023-38948 is an arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5.
2
How does CVE-2023-38948 work?
CVE-2023-38948 allows attackers to execute arbitrary code by downloading a crafted plugin.
3
What is the severity of CVE-2023-38948?
The severity of CVE-2023-38948 is high with a score of 7.2.
4
What is the affected software version of CVE-2023-38948?
The affected software version of CVE-2023-38948 is Jizhicms 1.9.5.
5
How can I fix CVE-2023-38948?
To fix CVE-2023-38948, it is recommended to update jizhi CMS to a version that has addressed the vulnerability.