VULNERABILITY INTELLIGENCE

CVE-2023-26817

CVSS score8.8 HIGH

EPSS probability1.50%

CISA KEVNot currently listed

Published2023-04-07

Last modified2026-06-17

Description

codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the component /controllers/api/user.php.