CVE-2023-26817

codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the component /controllers/api/user.php.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2023-04-07

Last modified

2025-02-12

Weaknesses

CWE-94

Affected products

• Codefever (Pgyer)

References

• https://github.com/PGYER/codefever/issues/140