CVE-2023-22953
published 2023-02-09CVE-2023-22953: In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user.
PriorityP355high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.43%
69.7th percentile
In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| expressionengine | expressionengine | < 7.2.6 | 7.2.6 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
https://docs.expressionengine.com/latest/installation/changelog.htmlhttps://gist.github.com/ahmedsherif/7b8f18a54a80ae0ac5ff6307c35b7d43https://hackerone.com/reports/1820492https://docs.expressionengine.com/latest/installation/changelog.htmlhttps://gist.github.com/ahmedsherif/7b8f18a54a80ae0ac5ff6307c35b7d43https://hackerone.com/reports/1820492
2023-02-09
Published