Lucene search

MitreCVE-2023-31824

HistoryJul 13, 2023 - 3:15 p.m.

CVE-2023-31824

2023-07-1315:15:09

mitre

web.nvd.nist.gov

dericia co. ltd

delicia

cve-2023-31824

information security

remote attack

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

70.8%

JSON

An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function.

Affected configurations

Nvd

Node

dericiadeliciaMatch13.6.1

VendorProductVersionCPE
dericiadelicia13.6.1cpe:2.3:a:dericia:delicia:13.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dericia	delicia	13.6.1	cpe:2.3:a:dericia:delicia:13.6.1:::::::*

References

delicia.com

dericia.com

github.com/syz913/CVE-reports/blob/main/CVE-2023-31824.md

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

70.8%

JSON

Related for CVE-2023-31824