CVE-2022-43030

High

Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background. SIYUCMS is a content management…

mitre·CWE-521·Published 2022-11-14

CVSS

7.2

EPSS

0.02

KEV

Exploits

cve.orgen

286 chars

Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background. SIYUCMS is a content management system based on ThinkPaP5 AdminLTE. SIYUCMS has a background command execution vulnerability, which can be used by attackers to gain server privileges

NVDen

286 chars

NVDes

337 chars

Se descubrió que Siyucms v6.1.7 contenía una vulnerabilidad de ejecución remota de código (RCE) en segundo plano. SIYUCMS es un sistema de gestión de contenidos basado en ThinkPaP5 AdminLTE. SIYUCMS tiene una vulnerabilidad de ejecución de comandos en segundo plano, que los atacantes pueden utilizar para obtener privilegios de servidor

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.2	—	—	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	NVD	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H