CVE-2023-3231

A vulnerability has been found in UJCMS up to 6.0.2 and classified as problematic. This vulnerability affects unknown code of the component ZIP Package Handler. The manipulation of the argument dir leads to information disclosure. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.0 is able to address this issue. It is recommended to upgrade the affected component. VDB-231502 is the identifier assigned to this vulnerability.

• CWE-200

• https://github.com/ujcms/ujcms/issues/6Exploit, Vendor Advisory
• https://vuldb.com/?ctiid.231502Permissions Required
• https://vuldb.com/?id.231502Permissions Required
• https://github.com/ujcms/ujcms/issues/6Exploit, Vendor Advisory
• https://vuldb.com/?ctiid.231502Permissions Required
• https://vuldb.com/?id.231502Permissions Required

Published

Jun 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32303Planet is software that provides satellite data. The secret …5.5
• CVE-2023-32305aiven-extras is a PostgreSQL extension. Versions prior to 1.…8.8
• CVE-2023-32306Time Tracker is an open source time tracking system. A time-…9.8
• CVE-2023-32307Sofia-SIP is an open-source SIP User-Agent library, complian…7.5
• CVE-2023-32308anuko timetracker is an open source time tracking system. Bo…9.8
• CVE-2023-32309PyMdown Extensions is a set of extensions for the `Python-Ma…7.5
• CVE-2023-32310DataEase is an open source data visualization and analysis t…8.1
• CVE-2023-32311CloudExplorer Lite is an open source cloud management platfo…4.3
• CVE-2023-32312UmbracoIdentityExtensions is an Umbraco add-on package that …5.3
• CVE-2023-32313vm2 is a sandbox that can run untrusted code with Node's bui…5.3
• CVE-2023-32314vm2 is a sandbox that can run untrusted code with Node's bui…10
• CVE-2023-32315Openfire is an XMPP server licensed under the Open Source Ap…7.5