CVE Catalog

CVE-2023-38942

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.65%

73th percentile - higher than 73% of all known CVEs

Summary

Dango-Translator v4.5.5 was found to contain a remote command execution (RCE) vulnerability via the component app/config/cloud_config.json.

Risk Assessment

This vulnerability could allow attackers to execute commands remotely on the server, posing a significant security risk.

Recommendation

It is recommended to update Dango-Translator to the latest version to mitigate this vulnerability and secure the cloud_config.json component.

Original NVD description (English source)

Dango-Translator v4.5.5 was discovered to contain a remote command execution (RCE) vulnerability via the component app/config/cloud_config.json.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS