1 results (0.012 seconds)

CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1

07 Apr 2023 — codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the component /controllers/api/user.php. • https://github.com/PGYER/codefever/issues/140 • CWE-94: Improper Control of Generation of Code ('Code Injection') •