MEDIUMCVSS v3.1 4.7Vulnerability
CVE-2026-124623
A security flaw has been discovered in PipraPay 3.0.0. Affected is the function system-settings-import of the file /sumo166/CVE-apply/blob/main/PipraPay/PipraPay/system-settings-import of the component ZIP Archive Handler. Performing a manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Epss score
- 0.00284
- Cvss severity
- MEDIUM
- Cvss score
- 4.7
- Retrieved at
- 2026-11-10T23:35:17+00:00
- Last source
- FIRST EPSS
- Score
- 4.7
- Cvss version
- 3.1
- Cve id
- CVE-2026-124623
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- First seen by Signal
- 2026-11-09T15:13:27+00:00
- Name
- CVE-2026-124623
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- Published at
- 2026-11-09T13:17:07.910
- Last modified
- 2026-11-09T23:17:20.470
- Epss percentile
- 0.21122
Related Entities (2)
HAS_WEAKNESS (2)
Related research
Explore deeper with Ninja Signal's threat intelligence graph