Vulnerabilities > CVE-2023-52085 - Unspecified vulnerability in Wintercms Winter

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

wintercms

NVD

Published: 2023-12-29

Updated: 2024-11-21

Summary

Winter is a free, open-source content management system. Users with access to backend forms that include a ColorPicker FormWidget can provide a value that would then be included without further processing in the compilation of custom stylesheets via LESS. This had the potential to lead to a Local File Inclusion vulnerability. This issue has been patched in v1.2.4.

Vulnerable Configurations

Part	Description	Count
Application	Wintercms Wintercms Winter 1.0.319 Wintercms Winter 1.0.320 Wintercms Winter 1.0.321 Wintercms Winter 1.0.322 Wintercms Winter 1.0.323 Wintercms Winter 1.0.324 Wintercms Winter 1.0.325 Wintercms Winter 1.0.326 Wintercms Winter 1.0.327 Wintercms Winter 1.0.328 Wintercms Winter 1.0.329 Wintercms Winter 1.0.330 Wintercms Winter 1.0.331 Wintercms Winter 1.0.332 Wintercms Winter 1.0.333 Wintercms Winter 1.0.334 Wintercms Winter 1.0.335 Wintercms Winter 1.0.336 Wintercms Winter 1.0.337 Wintercms Winter 1.0.338 Wintercms Winter 1.0.339 Wintercms Winter 1.0.340 Wintercms Winter 1.0.341 Wintercms Winter 1.0.342 Wintercms Winter 1.0.343 Wintercms Winter 1.0.344 Wintercms Winter 1.0.345 Wintercms Winter 1.0.346 Wintercms Winter 1.0.347 Wintercms Winter 1.0.348 Wintercms Winter 1.0.349 Wintercms Winter 1.0.350 Wintercms Winter 1.0.351 Wintercms Winter 1.0.352 Wintercms Winter 1.0.353 Wintercms Winter 1.0.354 Wintercms Winter 1.0.355 Wintercms Winter 1.0.356 Wintercms Winter 1.0.357 Wintercms Winter 1.0.358 Wintercms Winter 1.0.359 Wintercms Winter 1.0.360 Wintercms Winter 1.0.361 Wintercms Winter 1.0.362 Wintercms Winter 1.0.363 Wintercms Winter 1.0.364 Wintercms Winter 1.0.365 Wintercms Winter 1.0.366 Wintercms Winter 1.0.367 Wintercms Winter 1.0.368 Wintercms Winter 1.0.369 Wintercms Winter 1.0.370 Wintercms Winter 1.0.371 Wintercms Winter 1.0.372 Wintercms Winter 1.0.373 Wintercms Winter 1.0.374 Wintercms Winter 1.0.375 Wintercms Winter 1.0.376 Wintercms Winter 1.0.377 Wintercms Winter 1.0.378 Wintercms Winter 1.0.379 Wintercms Winter 1.0.380 Wintercms Winter 1.0.381 Wintercms Winter 1.0.382 Wintercms Winter 1.0.383 Wintercms Winter 1.0.384 Wintercms Winter 1.0.385 Wintercms Winter 1.0.386 Wintercms Winter 1.0.387 Wintercms Winter 1.0.388 Wintercms Winter 1.0.389 Wintercms Winter 1.0.390 Wintercms Winter 1.0.391 Wintercms Winter 1.0.392 Wintercms Winter 1.0.393 Wintercms Winter 1.0.394 Wintercms Winter 1.0.395 Wintercms Winter 1.0.396 Wintercms Winter 1.0.397 Wintercms Winter 1.0.398 Wintercms Winter 1.0.399 Wintercms Winter 1.0.400 Wintercms Winter 1.0.401 Wintercms Winter 1.0.402 Wintercms Winter 1.0.403 Wintercms Winter 1.0.404 Wintercms Winter 1.0.405 Wintercms Winter 1.0.406 Wintercms Winter 1.0.407 Wintercms Winter 1.0.408 Wintercms Winter 1.0.409 Wintercms Winter 1.0.410 Wintercms Winter 1.0.411 Wintercms Winter 1.0.412 Wintercms Winter 1.0.413 Wintercms Winter 1.0.414 Wintercms Winter 1.0.415 Wintercms Winter 1.0.416 Wintercms Winter 1.0.417 Wintercms Winter 1.0.418 Wintercms Winter 1.0.419 Wintercms Winter 1.0.420 Wintercms Winter 1.0.421 Wintercms Winter 1.0.422 Wintercms Winter 1.0.423 Wintercms Winter 1.0.424 Wintercms Winter 1.0.425 Wintercms Winter 1.0.426 Wintercms Winter 1.0.427 Wintercms Winter 1.0.428 Wintercms Winter 1.0.429 Wintercms Winter 1.0.430 Wintercms Winter 1.0.431 Wintercms Winter 1.0.432 Wintercms Winter 1.0.433 Wintercms Winter 1.0.434 Wintercms Winter 1.0.435 Wintercms Winter 1.0.436 Wintercms Winter 1.0.437 Wintercms Winter 1.0.438 Wintercms Winter 1.0.439 Wintercms Winter 1.0.440 Wintercms Winter 1.0.441 Wintercms Winter 1.0.442 Wintercms Winter 1.0.443 Wintercms Winter 1.0.444 Wintercms Winter 1.0.445 Wintercms Winter 1.0.446 Wintercms Winter 1.0.447 Wintercms Winter 1.0.448 Wintercms Winter 1.0.449 Wintercms Winter 1.0.450 Wintercms Winter 1.0.451 Wintercms Winter 1.0.452 Wintercms Winter 1.0.453 Wintercms Winter 1.0.454 Wintercms Winter 1.0.455 Wintercms Winter 1.0.456 Wintercms Winter 1.0.457 Wintercms Winter 1.0.458 Wintercms Winter 1.0.459 Wintercms Winter 1.0.460 Wintercms Winter 1.0.461 Wintercms Winter 1.0.462 Wintercms Winter 1.0.463 Wintercms Winter 1.0.464 Wintercms Winter 1.0.465 Wintercms Winter 1.0.466 Wintercms Winter 1.0.467 Wintercms Winter 1.0.468 Wintercms Winter 1.0.469 Wintercms Winter 1.0.470 Wintercms Winter 1.0.471 Wintercms Winter 1.0.472 Wintercms Winter 1.0.473 Wintercms Winter 1.0.474 Wintercms Winter 1.0.475 Wintercms Winter 1.1.0 Wintercms Winter 1.1.1 Wintercms Winter 1.1.2 Wintercms Winter 1.1.3 Wintercms Winter 1.1.4 Wintercms Winter 1.1.5 Wintercms Winter 1.1.6 Wintercms Winter 1.1.7 Wintercms Winter 1.1.8 Wintercms Winter 1.1.9 Wintercms Winter 1.1.10 Wintercms Winter 1.2.0 Wintercms Winter 1.2.1 Wintercms Winter 1.2.2 Wintercms Winter 1.2.3	172

Summary

Vulnerable Configurations

References