{ "dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": { "state": "PUBLISHED", "cveId": "CVE-2023-50917", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-02T22:23:44.178Z", "dateReserved": "2023-12-15T00:00:00.000Z", "datePublished": "2023-12-15T00:00:00.000Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-01-22T17:06:23.789Z" }, "descriptions": [ { "lang": "en", "value": "MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager." } ], "affected": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "references": [ { "url": "https://github.com/sergejey/majordomo/commit/0662e5ebfb133445ff6154b69c61019357092178" }, { "url": "https://github.com/sergejey/majordomo/commit/3ec3ffb863ea3c2661ab27d398776c551f4daaac" }, { "name": "20231219 Disclosure of CVE-2023-50917: RCE Vulnerability in MajorDoM", "tags": [ "mailing-list" ], "url": "http://seclists.org/fulldisclosure/2023/Dec/19" }, { "url": "http://packetstormsecurity.com/files/176273/MajorDoMo-Remote-Code-Execution.html" }, { "url": "http://packetstormsecurity.com/files/176669/MajorDoMo-Command-Injection.html" } ], "problemTypes": [ { "descriptions": [ { "type": "text", "lang": "en", "description": "n/a" } ] } ] }, "adp": [ { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:23:44.178Z" }, "title": "CVE Program Container", "references": [ { "url": "https://github.com/sergejey/majordomo/commit/0662e5ebfb133445ff6154b69c61019357092178", "tags": [ "x_transferred" ] }, { "url": "https://github.com/sergejey/majordomo/commit/3ec3ffb863ea3c2661ab27d398776c551f4daaac", "tags": [ "x_transferred" ] }, { "name": "20231219 Disclosure of CVE-2023-50917: RCE Vulnerability in MajorDoM", "tags": [ "mailing-list", "x_transferred" ], "url": "http://seclists.org/fulldisclosure/2023/Dec/19" }, { "url": "http://packetstormsecurity.com/files/176273/MajorDoMo-Remote-Code-Execution.html", "tags": [ "x_transferred" ] }, { "url": "http://packetstormsecurity.com/files/176669/MajorDoMo-Command-Injection.html", "tags": [ "x_transferred" ] } ] } ] } }