CVE-2023-37645

MediumCVSS 5.3

Published: 20/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

23.83%

98th percentile - higher than 98% of all known CVEs

Version 1.6.3 of eyoucms was found to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt.

Information disclosure may lead to the leakage of sensitive data, posing a security threat to the organization.

It is recommended to update to the latest version of eyoucms and secure access to the component /custom_model_path/recruit.filelist.txt.

Original NVD description (English source)

eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt.