CVE-2023-2554
Assigner: @huntrdev
Published: 2023-05-05T00:00:00
State: PUBLISHED
title: External Control of File Name or Path in unilogies/bumsys
descriptions: value: External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.
affected: vendor: unilogies
product: unilogies/bumsys
versions: version: unspecified
lessThan: 2.2.0
status: affected
versionType: custom
metrics: cvssV3_0: version: 3.0
vectorString: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
problemTypes: descriptions: type: CWE
description: CWE-73 External Control of File Name or Path
cweId: CWE-73
source: advisory: 396785a0-7bb6-4db4-b4cb-607b0fd4ab4b
discovery: EXTERNAL