CVE-2023-36097 - funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install

CRITICAL

funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install

Published Jun 22, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.87%

funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

Link	Providers	Tags
https://github.com/advisories/GHSA-5m3m-q8cq-77g4		Advisory
https://github.com/funadmin/funadmin/issues/17		ExploitIssue TrackingVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-36097

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 22, 2023

Updated Dec 2, 2024

Reserved Jun 21, 2023

Updated Dec 2, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a