PHP Remote File Inclusion in flatpressblog/flatpress
Published Dec 18, 2022
9.8
CRITICALCVSS 3.1
EPSS 35.44%
Description
PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<1.3
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Flatpressblog | Flatpressblog/flatpress | n/a |
|
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
PoCAutomatable
NoTechnical Impact
PartialDecision
n/aAssessed Apr 14, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (31 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 35.44% (0.35435) | 98.41th | v5 (v2026.06.15) |
| Jun 15, 2026 | 35.44% (0.35435) | 98.24th | v5 (v2026.06.15) |
| Apr 5, 2026 | 12.01% (0.12007) | 93.76th | v4 (v2025.03.14) |
| Feb 16, 2026 | 3.02% (0.03024) | 86.32th | v4 (v2025.03.14) |
| Dec 29, 2025 | 12.01% (0.12007) | 93.54th | v4 (v2025.03.14) |
| Dec 23, 2025 | 8.50% (0.08496) | 92.06th | v4 (v2025.03.14) |
| Dec 19, 2025 | 18.39% (0.18386) | 95.00th | v4 (v2025.03.14) |
| Nov 21, 2025 | 19.80% (0.19796) | 95.21th | v4 (v2025.03.14) |
| Nov 18, 2025 | 2.80% (0.02800) | 84.83th | v4 (v2025.03.14) |
| Jul 29, 2025 | 18.84% (0.18842) | 95.00th | v4 (v2025.03.14) |
| Jul 24, 2025 | 21.83% (0.21827) | 95.49th | v4 (v2025.03.14) |
| Jul 11, 2025 | 16.03% (0.16031) | 94.48th | v4 (v2025.03.14) |
| May 29, 2025 | 14.71% (0.14714) | 94.12th | v4 (v2025.03.14) |
| Mar 30, 2025 | 13.39% (0.13388) | 93.57th | v4 (v2025.03.14) |
| Mar 29, 2025 | 62.88% (0.62879) | 97.70th | v4 (v2025.03.14) |
| Mar 24, 2025 | 13.39% (0.13388) | 93.56th | v4 (v2025.03.14) |
| Mar 23, 2025 | 48.01% (0.48006) | 97.37th | v4 (v2025.03.14) |
| Mar 17, 2025 | 13.67% (0.13673) | 93.72th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.39% (0.00390) | 74.11th | v3 (v2023.03.01) |
| Jul 10, 2024 | 0.38% (0.00378) | 73.07th | v3 (v2023.03.01) |
| May 30, 2024 | 0.34% (0.00336) | 71.23th | v3 (v2023.03.01) |
| Feb 8, 2024 | 0.31% (0.00307) | 69.07th | v3 (v2023.03.01) |
| Jan 20, 2024 | 0.31% (0.00307) | 66.76th | v3 (v2023.03.01) |
| Dec 25, 2023 | 0.27% (0.00273) | 64.57th | v3 (v2023.03.01) |
| Nov 18, 2023 | 0.19% (0.00192) | 56.72th | v3 (v2023.03.01) |
| May 8, 2023 | 0.17% (0.00171) | 52.72th | v3 (v2023.03.01) |
| Apr 22, 2023 | 0.19% (0.00189) | 54.86th | v3 (v2023.03.01) |
| Mar 27, 2023 | 0.20% (0.00198) | 56.03th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.17% (0.00170) | 52.13th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.05% (0.01055) | 52.13th | v2 (v2022.01.01) |
| Dec 19, 2022 | 1.05% (0.01055) | 51.17th | v2 (v2022.01.01) |
References (2)
- https://github.com/flatpressblog/flatpress/commit/c30d52b28483e1e512d0d81758d4c149f02b4068 PatchThird Party Advisory
- https://huntr.dev/bounties/3dab0466-c35d-4163-b3c7-a8666e2f7d95 ExploitPatchThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://github.com/flatpressblog/flatpress/commit/c30d52b28483e1e512d0d81758d4c149f02b4068 | PatchThird Party Advisory | |
| https://huntr.dev/bounties/3dab0466-c35d-4163-b3c7-a8666e2f7d95 | ExploitPatchThird Party Advisory |
Change history (0)
No recorded changes yet.