CVE-2023-7098: icret EasyImages hide.php path traversal

Published Dec 25, 2023

Updated

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vulnerability affects unknown code of the file app/hide.php. The manipulation of the argument key leads to path traversal: '../filedir'. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-248950 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected Software

1 affected component

Easyimages2.0 Project Easyimages2.0=2.8.3

Event History

Dec 25, 2023

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-7098?

CVE-2023-7098 is classified as a problematic vulnerability due to its potential for path traversal attacks.

How do I fix CVE-2023-7098?

To fix CVE-2023-7098, ensure proper validation and sanitization of user inputs in the app/hide.php file.

Which software is affected by CVE-2023-7098?

CVE-2023-7098 affects EasyImages version 2.8.3.

What type of vulnerability is CVE-2023-7098?

CVE-2023-7098 is a path traversal vulnerability that allows attackers to access restricted files.

Are there any known exploits for CVE-2023-7098?

Yes, CVE-2023-7098 can be exploited through manipulated arguments that lead to unauthorized file access.