CVE-2023-51892

CriticalCVSS 9.8/10Last modified Jul 9, 2026

Description

An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jan 20, 2024
Last modified
Jul 9, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-51906.1Open redirect vulnerability in the Countries Management’s edit region page in Liferay Portal 7.4.3.45 through 7.4.3.101, and Liferay DXP 202CVE-2023-519069.8An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uCVE-2023-51926.5Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0.CVE-2023-519249.8An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to executeCVE-2023-519259.8An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 alloCVE-2023-519267.5YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher comCVE-2023-519279.8YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScriCVE-2023-519289.8An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 alloCVE-2023-51932.7Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to rCVE-2023-519317.5An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a crafted payload to the parsing function.CVE-2023-519398.8An issue in the cp_bbs_sig function in relic/src/cp/relic_cp_bbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitiveCVE-2023-51944.3Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deact
CVE-2023-51892: Critical severity, CVSS 9.8 | Vulnix