CVE-2026-43936

4.3 Moyenne

Publiée le 26/05/2026 à 18:16 · Modifiée le 24/07/2026 à 13:10 · Analyse NVD reportée · Source : security-advisories@github.com

Description

e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Media Manager" on the administrator screen. This vulnerability is fixed in 2.3.4.

Traduire en français

Produits concernés

e107inc e107

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.3 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-918

Références

https://github.com/e107inc/e107/commit/40b2d111
https://github.com/e107inc/e107/commit/5f98cc9f
https://github.com/e107inc/e107/security/advisories/GHSA-92fr-7h4f-22pp
https://github.com/e107inc/e107/security/advisories/GHSA-92fr-7h4f-22pp

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories