CVE-2023-5919 MEDIUM

CVE-2023-5919: SourceCodester Company Website CMS Create Blog Page createblog unrestricted upload

Vendor Sourcecodester

Product Company Website CMS

Weakness CWE-434 · Unrestricted file upload

Published November 2, 2023

Last update February 27, 2025

View on NVD All CVEs

CVSS base score

4.7/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /dashboard/createblog of the component Create Blog Page. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-244310 is the identifier assigned to this vulnerability.

Key dates

02Disclosure timeline

November 2, 2023 CVE published

February 27, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-5919 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html