CVE Catalog

CVE-2023-34865

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.21%

64th percentile - higher than 64% of all known CVEs

Summary

CVE-2023-34865 in ujcms 6.0.2 has a directory traversal vulnerability that allows attackers to move files via the rename feature.

Risk Assessment

This vulnerability could lead to unauthorized access to system files, posing a serious threat to data integrity.

Recommendation

It is recommended to update to the latest version of ujcms to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS