CVE-2023-0651

A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-434

• https://github.com/linmoren/fastcms_bug/blob/main/password.zipBroken Link
• https://github.com/linmoren/fastcms_bug/blob/main/template_files_upload.mdBroken Link
• https://vuldb.com/?ctiid.220038Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220038Third Party Advisory
• https://vuldb.com/?submit.82316
• https://github.com/linmoren/fastcms_bug/blob/main/password.zipBroken Link
• https://github.com/linmoren/fastcms_bug/blob/main/template_files_upload.mdBroken Link
• https://vuldb.com/?ctiid.220038Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220038Third Party Advisory

Published

Feb 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0645An out of bounds read exists in libjxl. An attacker using a …9.1
• CVE-2023-0646A vulnerability classified as critical was found in dst-admi…7.5
• CVE-2023-0647A vulnerability, which was classified as critical, has been …7.5
• CVE-2023-0648A vulnerability, which was classified as critical, was found…7.5
• CVE-2023-0649A vulnerability has been found in dst-admin 1.5.0 and classi…7.5
• CVE-2023-0650A vulnerability was found in YAFNET up to 3.1.11 and classif…5.4
• CVE-2023-0652Due to a hardlink created in the ProgramData folder during t…7.8
• CVE-2023-0654Due to a misconfiguration, the WARP Mobile Client (< 6.29) f…3.7
• CVE-2023-0655SonicWall Email Security contains a vulnerability that could…5.3
• CVE-2023-0656A Stack-based buffer overflow vulnerability in the SonicOS a…7.5
• CVE-2023-0657A flaw was found in Keycloak. This issue occurs due to impro…3.4
• CVE-2023-0658A vulnerability, which was classified as critical, was found…7.5