peter bassill · operator
$ cve CVE-2024-43160 JSON

CVE-2024-43160

10.0
CRITICAL · CVSS 3.1 · EPSS 4.6% (pctl 91)

In your normal cycle

Critical by CVSS (10), but no sign of active exploitation.

Description

Unrestricted Upload of File with Dangerous Type vulnerability in BerqWP allows Code Injection.This issue affects BerqWP: from n/a through 1.7.6.

Scoring

CVSS10.0 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS4.59% — more likely to be exploited than 91% of all CVEs
WeaknessCWE-434
On CISA KEVno
Public exploitnone known
Published2024-08-13
Last modified2026-06-17

References

→ the Explorer  ·  watch your stack  ·  NVD