CVE-2023-3643

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233889 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-73

Affected software

No affected versions have been published.

Timeline

Published
Jul 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-364317.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2023-364336.5Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityCVE-2023-364349.8Windows IIS Server Elevation of Privilege VulnerabilityCVE-2023-364357.5Microsoft QUIC Denial of Service VulnerabilityCVE-2023-364367.8Windows MSHTML Platform Remote Code Execution VulnerabilityCVE-2023-364378.8Azure DevOps Server Remote Code Execution VulnerabilityCVE-2023-364387.5Windows TCP/IP Information Disclosure VulnerabilityCVE-2023-364398.0Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-36449.8A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affCVE-2023-36454.8The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow highCVE-2023-364567.3authentik is an open-source Identity Provider. Prior to versions 2023.4.3 and 2023.5.5, authentik does not verify the source of the X-ForwarCVE-2023-364578.81Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craf
CVE-2023-3643: Critical severity, CVSS 9.8 | Vulnix