What is CVE-2022-23810?

CVE-2022-23810 is a medium-severity vulnerability in Appleple A-blog_cms, classified under Code Injection. CVSS score: 6.5/10. Published 2022-02-24.

How severe is CVE-2022-23810?

Medium severity. CVSS v3 base score is 6.5 out of 10.

RCE in Appleple A-blog_cms

CVE-2022-23810

Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions…

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.011 (61.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Appleple A-blog_cms — versions 3.0.0
Appleple Inc. A-blog Cms — versions Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1

Weakness classification (CWE)

CWE-94 — Code Injection

References

vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)
vultures@jpcert.or.jp (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-23810?: CVE-2022-23810 is a medium-severity vulnerability in Appleple A-blog_cms, classified under Code Injection. CVSS score: 6.5/10. Published 2022-02-24.
How severe is CVE-2022-23810?: Medium severity. CVSS v3 base score is 6.5 out of 10.