CVE-2023-24736

Deeper analysis

PMB version 7.4.6 contains a remote code execution vulnerability in the component /sauvegarde/restaure_act.php. The flaw received a CVSS 3.1 base score of 9.8, reflecting network attack vector, low attack complexity, and no requirements for authentication or user interaction, with high impact on confidentiality, integrity, and availability.

An unauthenticated attacker with network access can exploit the component to execute arbitrary code on the server, resulting in complete system compromise. The published references consist of GitHub repositories that document the issue but contain no official vendor advisories, patch details, or mitigation guidance.

The associated EPSS score has remained essentially flat near 0.09 with a peak of 0.0909, indicating moderate but stable exploitation interest since disclosure. No information on observed in-the-wild activity is provided in the available data.