CVE-2023-2245

6.3 mediumEPSS 1.3%

Medium (6.3) in hansuncms project hansuncms. EPSS 1.3% chance of exploitation in the next 30 days.

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227230 is the identifier assigned to this vulnerability.

Severity

CVSS 3.1

6.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-04-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hansuncms_project:hansuncms

References

https://github.com/MorStardust/hansuncmswebshell/blob/main/README.md
https://vuldb.com/?ctiid.227230
https://vuldb.com/?id.227230
https://github.com/MorStardust/hansuncmswebshell/blob/main/README.md
https://vuldb.com/?ctiid.227230

Check your stack JSON