Lucene search

@huntrdevCVE-2023-1362

HistoryMar 13, 2023 - 5:15 a.m.

CVE-2023-1362

2023-03-1305:15:11

CWE-1021

@huntrdev

web.nvd.nist.gov

cve-2023-1362

nvd

github

repository

security

vulnerability

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

48.8%

JSON

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.

Affected configurations

Nvd

Node

bumsys_projectbumsysRange<2.0.2

VendorProductVersionCPE
bumsys_projectbumsys*cpe:2.3:a:bumsys_project:bumsys:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bumsys_project	bumsys	*	cpe:2.3:a:bumsys_project:bumsys::::::::

CNA Affected

[
  {
    "vendor": "unilogies",
    "product": "unilogies/bumsys",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "v2.0.2",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/unilogies/bumsys/commit/8c5b27d54707f9805b27ef26ad741f2801e30e1f

huntr.dev/bounties/e5959166-c8ef-4ada-9bb1-0ff5a9693bac

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

48.8%

JSON

Related for CVE-2023-1362