CVE-2023-3056
MediumCVSS 4.3Exploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
A vulnerability was found in YFCMF up to version 3.0.4, affecting unknown code in the index.php file. The manipulation leads to path traversal: '../filedir'.
Risk Assessment
The attack can be initiated remotely, increasing the risk of exploitation by third parties.
Recommendation
It is recommended to update YFCMF to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.
Original NVD description (English source)
A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230542 is the identifier assigned to this vulnerability.