LOWπŸ‡΅πŸ‡± Wersja polska

CVE-2023-5297

CVSS 3.7v3.1pub. 2023-09-29upd. 2024-11-21

A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start of the file task.php?m=sys|runt&a=beifen. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240927.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

  • Rockoa

    APP
    Rockoa
    2.3.2
πŸ”΅
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-63742CRITICAL9.8PL βœ“ten sam produkt

SQL Injection w Xinhu RockOA – wyciek danych administratora

CVE-2023-49363CRITICAL9.8PL βœ“ten sam produkt

SQL Injection w Rockoa β€” metoda indexAction w reimpAction.php

CVE-2020-18714CRITICAL9.8ten sam produkt

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters...

CVE-2020-18713CRITICAL9.8ten sam produkt

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters...

CVE-2020-18716CRITICAL9.8ten sam produkt

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters...

CVE-2023-5297 β€” Rockoa β€” LOW β€” CVSS 3.7 | CVEbaza.pl