CVE-2023-36348 is an authenticated remote code execution (RCE) vulnerability found in POS Codekop v2.0, specifically through the filename parameter. This high-severity flaw (CVSS 8.8) allows a low-privileged attacker to execute arbitrary code remotely with low attack complexity, leading to high impacts on confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an ExploitDB entry (EDB-51551) confirms the availability of public exploit code, though there is currently no significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0CPE matchmatch criteria | cpe:2.3:a:codekop:codekop:2.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.