Beveiligingsadvies

CVE-2023-38693

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-05 15:37:55

Laatst bijgewerkt 2025-03-06 21:58:44

Toegewezen door GitHub_M

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Lucee Server (or simply Lucee) is a dynamic, Java based, tag and scripting language used for rapid web application development. The Lucee REST endpoint is vulnerable to RCE via an XML XXE attack. This vulnerability is fixed in Lucee 5.4.3.2, 5.3.12.1, 5.3.7.59, 5.3.8.236, and 5.3.9.173.

← Alle CVE's bekijken Bekijk op cve.org ↗