CVE-2023-36339
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive backup data, potentially leading to data loss or leakage.
Recommendation
It is recommended to update WebBoss.io CMS to the latest version to patch this vulnerability and implement additional access control measures.
Other vulnerabilities in WebBoss.io CMS v3.7.0.1
See all- CVE-2023-39097Medium
WebBoss.io CMS version 3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.
- CVE-2023-39096Medium
WebBoss.io CMS version 3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and output encoding.
- CVE-2023-37742Medium
WebBoss.io CMS before version 3.7.0.1 contains a reflected XSS vulnerability.
Original NVD description (English source)
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request.