CVE-2023-37049 : emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php.

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php.

Published 2023-07-26 13:15:10

Updated 2023-07-31 18:12:45

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2023-37049

Emlog » Emlog » Version: 2.1.9
cpe:2.3:a:emlog:emlog:2.1.9:-:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 26 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H	1.2	5.2	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: High

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Assigned by: nvd@nist.gov (Primary)

https://github.com/Num-Nine/CVE/issues/1

emlogcms has an arbitrary file deletion vulnerability · Issue #1 · Num-Nine/CVE · GitHub
Exploit;Issue Tracking;Vendor Advisory

Jump to