Lucene search

CVE-2023-28098

🗓️ 15 Mar 2023 23:09:15Reported by GitHub_MType

OpenSIPS SIP server <3.2.4 Authorization header bu

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2023-28098 OpenSIPS has vulnerability in the Digest Authentication Parser	15 Mar 202322:11	–	cvelist
UbuntuCve	CVE-2023-28098	15 Mar 202300:00	–	ubuntucve
OSV	CVE-2023-28098	15 Mar 202323:15	–	osv
OSV	UBUNTU-CVE-2023-28098	15 Mar 202323:15	–	osv
Vulnrichment	CVE-2023-28098 OpenSIPS has vulnerability in the Digest Authentication Parser	15 Mar 202322:11	–	vulnrichment
Prion	Authorization	15 Mar 202323:15	–	prion
NVD	CVE-2023-28098	15 Mar 202323:15	–	nvd

Nvd

Vulners

Node

opensips opensipsRange<3.1.7

opensips opensipsRange3.2.0–3.2.4

[
  {
    "vendor": "OpenSIPS",
    "product": "opensips",
    "versions": [
      {
        "version": "< 3.1.7",
        "status": "affected"
      },
      {
        "version": ">= 3.2.0, < 3.2.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/OpenSIPS/opensips/commit/dd9141b6f67d7df4072f3430f628d4b73df5e102
opensips	www.opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf
github	www.github.com/OpenSIPS/opensips/security/advisories/GHSA-jrqg-vppj-hr2h

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Mar 2023 23:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS35.9 - 7.5

EPSS0.00077

SSVC

CWE-20