Lucene search

TR-CERTCVE-2023-1246

HistoryMar 10, 2023 - 9:15 p.m.

CVE-2023-1246

2023-03-1021:15:14

CWE-552

TR-CERT

web.nvd.nist.gov

cve-2023-1246

external parties

access vulnerability

starcities

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

51.1%

JSON

Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.This issue affects Starcities: through 1.3.

Affected configurations

Nvd

Node

saysisstarcitiesRange≤1.3

VendorProductVersionCPE
saysisstarcities*cpe:2.3:a:saysis:starcities:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
saysis	starcities	*	cpe:2.3:a:saysis:starcities::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Starcities",
    "vendor": "Saysis",
    "versions": [
      {
        "lessThanOrEqual": "1.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-23-0140

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

51.1%

JSON

Related for CVE-2023-1246