Security readout for executives and security teams
Plain-English summary
CVE-2023-46010 is reported as an arbitrary command execution issue in SeaCMS v12.9, involving the admin_safe.php component. If an exposed deployment is affected, compromise could extend from the application to the hosting server. The public source bundle does not provide CVSS, patch status, or authentication prerequisites.
Executive priority
Treat this as a high-priority exposure review if SeaCMS is present. Command execution can become full server compromise, but urgency depends on whether SeaCMS v12.9 is deployed and whether administrative routes are reachable.
Technical view
The CVE record describes command execution through SeaCMS v12.9 admin_safe.php and maps the issue to CWE-94. No CPEs, CVSS vector, affected-version range beyond v12.9, proof of exploitation, or vendor remediation details are provided in the bundle.
Likely exposure
Likely exposure is limited to organizations running SeaCMS v12.9, especially where the administrative interface or admin_safe.php is reachable. The sources do not confirm whether exploitation requires administrator authentication or another precondition.
Exploitation context
CISA KEV status is false in the supplied bundle. The bundle includes a third-party technical reference, but does not provide source-grounded evidence of active exploitation, exploitation scale, or a weaponized public exploit.
Researcher notes
Evidence is sparse: the CVE names SeaCMS v12.9, admin_safe.php, arbitrary command execution, and CWE-94. There is no CVSS, CPE, patch statement, or confirmed authentication model in the provided sources.
Mitigation direction
- Check SeaCMS vendor guidance for a fixed release or official mitigation.
- Restrict access to SeaCMS administrative paths to trusted networks only.
- Disable or remove vulnerable SeaCMS instances if no supported fix exists.
- Monitor web and application logs for unusual admin_safe.php activity.
- Back up affected sites before remediation or upgrade work.
Validation and detection
- Inventory public and internal web assets for SeaCMS deployments.
- Confirm whether any instance is SeaCMS v12.9.
- Verify whether admin_safe.php is reachable from untrusted networks.
- Review authentication and administrative access controls around SeaCMS admin paths.
- Check logs for suspicious requests targeting admin_safe.php.
- Track CVE and vendor sources for remediation updates.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-94: Code execution behavior lookup
Code execution and unsafe deserialization weaknesses often justify reviewing execution behavior and process telemetry. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2023-46010 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://blog.csdn.net/DGS666/article/details/133795200?spm=1001.2014.3001.5501CVE reference, mitre
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Control of Generation of Code ('Code Injection')
Improper Control of Generation of Code ('Code Injection') represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.