CVE-2023-3852

MediumCVSS 4.7

Published: 23/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

23.16%

97th percentile - higher than 97% of all known CVEs

Summary

A critical vulnerability was found in OpenRapid RapidCMS up to version 1.3.1, affecting unknown code in the file /admin/upload.php. Manipulation of the 'file' argument leads to unrestricted file uploads.

Risk Assessment

This vulnerability allows for remote exploitation, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to apply the patch named 4dff387283060961c362d50105ff8da8ea40bcbe to fix this issue.

Original NVD description (English source)

A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/upload.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 4dff387283060961c362d50105ff8da8ea40bcbe. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-235204.