VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jun 22, 2023· Updated Jun 17, 2026

CVE-2023-36097

CVE-2023-36097

Description

funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
funadmin/funadminPackagist
>= 3.3.2, <= 3.3.3—

Affected products

4
  • Funadmin/Funadmin3 versions
    cpe:2.3:a:funadmin:funadmin:3.3.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:funadmin:funadmin:3.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:funadmin:funadmin:3.3.3:*:*:*:*:*:*:*
    • (no CPE)
  • ghsa-coords
    pkg:composer/funadmin/funadmin
    Range: >= 3.3.2, <= 3.3.3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.