CVE Vulnerabilities

CVE-2018-17890

Use of Obsolete Function

Published: Oct 12, 2018 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arbitrary code execution.

Weakness

The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.

Affected Software

NameVendorStart VersionEnd Version
Nuuo_cmsNuuo*3.1 (including)

Extended Description

As programming languages evolve, functions occasionally become obsolete due to:

Functions that are removed are usually replaced by newer counterparts that perform the same task in some different and hopefully improved way.

Potential Mitigations

References