CVE-2023-27812

CriticalCVSS 9.1

Published: 13/04/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.16%

63th percentile - higher than 63% of all known CVEs

Summary

In bloofox v0.5.2, an arbitrary file deletion vulnerability was discovered via the delete_file() function. An attacker can exploit this flaw to delete critical system files.

Risk Assessment

The risk involves the potential deletion of configuration files or application data, which could lead to system downtime or data loss.

Recommendation

It is recommended to immediately update bloofox to the latest version and restrict access to the delete_file() function to trusted users only.

Original NVD description (English source)

bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file() function.