ZDI-CAN-23734
HIGH 8.2
Overdue
Apr 26, 2024
PublicCMS
PublicCMS, a content management system, contains a high-severity vulnerability (CVSS 8.2) that can be exploited remotely over the network without authentication or user interaction required. The flaw primarily impacts confidentiality with some integrity compromise, allowing attackers to potentially access sensitive data and make unauthorized modifications. Security teams should monitor for active exploitation of PublicCMS instances and ensure timely patching once the vendor releases a fix by the August 24, 2024 deadline.
Advisory Details
Researcher
Discovered by:
Vinicius Ribeiro Ferreira da Silva
Reported
April 26, 2024
Deadline
August 24, 2024
600d overdue
CVSS Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N