CVE-2023-1970 json
yuan1994 tpAdmin Upload.php Upload unrestricted upload
published 2023-04-10 3 y ago modified 2026-06-17 4 mo ago also GHSA-27pg-4cj6-8994 , EUVD-2023-1152
- cvss
- 6.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.0%
- EPSS 1.0% chance of exploitation in 30 days, percentile 63%
- public exploits
- 0
- none known
Summary
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin 1.3.12. This issue affects the function Upload of the file application\admin\controller\Upload.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225407. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 21 mo ago
Exploit prediction
1.01% chance of exploitation in the next 30 days, higher than 63% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- tib36.github.io https://tib36.github.io/2023/04/09/tpAdmin-RCE/ referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 6.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| CNA | 3.0 | 6.3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| CNA | 2.0 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| NVD | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| packagist | yuan1994/tpadmin | <=1.3.12 |
no fix listed |
Affected products
- yuan1994 tpAdmin
Classification
- Weakness
-
- CWE-434 Unrestricted Upload of File with Dangerous Type
References
-
tib36.github.io
/2023/04/09/tpAdmin-RCE/
broken-link, exploit, third-party-advisory
-
vuldb.com
/?id.225407
vdb-entry, technical-description, web, third-party-advisory
-
vuldb.com
/?ctiid.225407
signature, permissions-required, web, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2023-1970
advisory
-
github.com
/yuan1994/tpAdmin
package
-
tib36.github.io
/2023/04/09/tpAdmin-RCE
web
Sources
- CVE List CVE-2023-1970
- GitHub Advisory GHSA-27pg-4cj6-8994
- NVD CVE-2023-1970
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.