Lucene search

@huntrdevCVE-2023-0919

HistoryFeb 19, 2023 - 3:15 p.m.

CVE-2023-0919

2023-02-1915:15:10

CWE-306

@huntrdev

web.nvd.nist.gov

cve-2023-0919

authentication

github

repository

security

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

4.2

Confidence

High

EPSS

0.001

Percentile

25.5%

JSON

Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0.

Affected configurations

Nvd

Node

kavitareaderkavitaRange<0.7.0

VendorProductVersionCPE
kavitareaderkavita*cpe:2.3:a:kavitareader:kavita:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kavitareader	kavita	*	cpe:2.3:a:kavitareader:kavita::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "kareadita/kavita",
    "vendor": "kareadita",
    "versions": [
      {
        "lessThan": "0.7.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/Kareadita/Kavita/pull/1748/commits/6648b79e1b2f92449d5816d0722b7a3d72f259d5

huntr.dev/bounties/3c514923-473f-4c50-ae0d-d002a41fe70f

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

4.2

Confidence

High

EPSS

0.001

Percentile

25.5%

JSON

Related for CVE-2023-0919