CVE-2023-3607
MediumCVSS 5.5Exploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
A critical vulnerability was found in kodbox 1.26 affecting the Execute function of the webconsole.php.txt file in the WebConsole Plug-In component. Manipulation of this function leads to OS command injection.
Risk Assessment
This vulnerability can be exploited by attackers to execute arbitrary commands on the server, posing a serious security threat to the system.
Recommendation
It is recommended to immediately update the kodbox component to the latest version to mitigate this vulnerability and monitor the system for unauthorized activities.
Original NVD description (English source)
A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-233476. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.