CVE-2023-5297

HIGH Year: 2023
CVSS v3 Score
7.5
High
CVSS v2 Score
2.6
Low
Weakness Type
CWE-530
View all →

Vulnerability Description

A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start of the file task.php?m=sys|runt&a=beifen. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240927.

Related Vulnerabilities

CVE-2024-12330

HIGH
CVSS:7.5(High)

The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly ...

CWE-5302024

CVE-2024-12330

HIGH
CVSS:7.5(High)

The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly ...

CWE-5302024

CVE-2024-2364

MEDIUM
CVSS:4.6(Medium)

A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup Handler. The manipula...

CWE-5302024

CVE-2024-3124

LOW
CVSS:2.4(Low)

A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. Th...

CWE-5302024

CVE-2024-3128

LOW
CVSS:2.4(Low)

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in Replify-Messenger 1.0 on Android. This issue affects some unknown processing of the file android...

CWE-5302024

CVE-2024-3430

LOW
CVSS:2.4(Low)

A vulnerability was found in QKSMS up to 3.9.4 on Android. It has been classified as problematic. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The...

CWE-5302024