← Volver a CVEs
CVE-2023-46586
CRITICAL9.1
Descripcion
cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 (before 1.0) lacks '\0' termination of the path for CGI scripts because strncpy is misused.
Detalles CVE
Puntuacion CVSS v3.19.1
SeveridadCRITICAL
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado10/9/2024
Ultima modificacion3/19/2025
Fuentenvd
Avistamientos honeypot0
Debilidades (CWE)
CWE-119
Referencias
https://github.com/ltworf/weborf/pull/88(cve@mitre.org)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.