CVE-2023-44172: Path Traversal

Published Sep 26, 2023

Updated

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminweixin.php.

Affected Software

1 affected component

SEACMS SEACMS=12.9

Event History

Sep 26, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-44172?

CVE-2023-44172 is an arbitrary file write vulnerability in SeaCMS V12.9 via the component admin_weixin.php.

How severe is CVE-2023-44172?

CVE-2023-44172 has a severity rating of 9.8 (critical).

Which software version is affected by CVE-2023-44172?

SeaCMS version 12.9 is affected by CVE-2023-44172.

How can I fix CVE-2023-44172?

There is currently no official fix available for CVE-2023-44172, it is recommended to update to a newer version if one becomes available or apply any patches provided by the vendor.

Where can I find more information about CVE-2023-44172?

You can find more information about CVE-2023-44172 in the following reference document: [SeaCMS V12.9 Arbitrary file write vulnerability](https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf).