CVE-2023-37265

🗓️ 17 Jul 2023 20:59:25Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 138 Views

CasaOS 0.4.4 allows unauthenticated attackers to execute arbitrary commands as `root` due to lack of IP address verification

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2023-37265	18 Jul 202300:45	–	circl
CNNVD	CasaOS 访问控制错误漏洞	17 Jul 202300:00	–	cnnvd
CNVD	IBM DB2 is a relational database management system from International Business Machines (IBM). The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a denial of service.	19 Jul 202300:00	–	cnvd
Cvelist	CVE-2023-37265 Incorrect identification of source IP addresses in CasaOS	17 Jul 202320:59	–	cvelist
Github Security Blog	CasaOS Gateway vulnerable to incorrect identification of source IP addresses	17 Jul 202314:36	–	github
GitLab Advisory Database	CasaOS Gateway vulnerable to incorrect identification of source IP addresses	17 Jul 202300:00	–	gitlab
Nuclei	CasaOS < 0.4.4 - Authentication Bypass via Internal IP	4 Jun 202603:48	–	nuclei
NVD	CVE-2023-37265	17 Jul 202321:15	–	nvd
OSV	CVE-2023-37265 Incorrect identification of source IP addresses in CasaOS	17 Jul 202320:59	–	osv
OSV	GHSA-VJH7-5R6X-XH6G CasaOS Gateway vulnerable to incorrect identification of source IP addresses	17 Jul 202314:36	–	osv

NVD

Vulners

Vulnrichment

Node

icewhale casaosRange<0.4.4

icewhale casaosMatch0.4.4alpha1

icewhale casaosMatch0.4.4alpha2

icewhale casaosMatch0.4.4alpha3

icewhale casaosMatch0.4.4alpha4

icewhale casaosMatch0.4.4alpha5

Node

icewhale casaos-gatewayRange<0.4.4

icewhale casaos-gatewayMatch0.4.4alpha1

[
  {
    "vendor": "IceWhaleTech",
    "product": "CasaOS-Gateway",
    "versions": [
      {
        "version": "< 0.4.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/IceWhaleTech/CasaOS-Gateway/commit/391dd7f0f239020c46bf057cfa25f82031fc15f7
github	www.github.com/IceWhaleTech/CasaOS-Gateway/security/advisories/GHSA-vjh7-5r6x-xh6g
sonarsource	www.sonarsource.com/blog/security-vulnerabilities-in-casaos

07 Apr 2025 13:54Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

EPSS0.91121

SSVC

CWE-306