Cyber Resilience

CVE-2023-43154

Critical

Published: 27 September 2023

Published
27 September 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0042 62.1th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-43154 is a critical-severity Type Confusion (CWE-843) vulnerability in Macs Cms Project Macs Cms. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 37.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during login attempt results in PHP type confusion vulnerability that leads to authentication bypass and takeover of the administrator account.

CWE(s)
CWE-843

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

macs cms project
macs cms
1.1.4f

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References