CVE-2023-51154: Infoleak
Published Jan 4, 2024
·Updated
Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsController.php.
Affected Software
1 affected component
Jizhicms JIZHICMS=2.5.0
Event History
Jan 4, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-51154?
CVE-2023-51154 has been classified as a high severity vulnerability due to its potential for arbitrary file downloads.
2
How do I fix CVE-2023-51154?
To remediate CVE-2023-51154, it is recommended to update Jizhicms to the latest version that contains a patch for this vulnerability.
3
What versions are affected by CVE-2023-51154?
CVE-2023-51154 affects Jizhicms version 2.5.0.
4
Can CVE-2023-51154 be exploited remotely?
Yes, CVE-2023-51154 can be exploited remotely, allowing attackers to download arbitrary files from the server.
5
What component is involved in CVE-2023-51154?
The vulnerability CVE-2023-51154 is found in the /admin/c/PluginsController.php component of Jizhicms.