CVE-2023-41882

🗓️ 11 Oct 2023 19:48:44Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 108 Views🌐 WEB

vantage6 /api/collaboration/{id}/task permission vulnerabilit

Reporter	Title	Published	Views	Family All 242
Circl	CVE-2023-41882	12 Oct 202300:17	–	circl
CNNVD	vantage6 Code Issue Vulnerability	11 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-41882 vantage6 Improper Access Control vulnerability	11 Oct 202319:48	–	cvelist
EUVD	EUVD-2023-0259	3 Oct 202520:07	–	euvd
Github Security Blog	Improper Access Control in vantage6	13 Oct 202319:29	–	github
Mend	CVE-2023-41882	11 Oct 202319:48	–	mend
NVD	CVE-2023-41882	11 Oct 202320:15	–	nvd
osv_ghsa	GHSA-GC57-XHH5-M94R Improper Access Control in vantage6	13 Oct 202319:29	–	osv_ghsa
osv_pysec	PYSEC-2023-201	11 Oct 202320:15	–	osv_pysec
Prion	Code injection	11 Oct 202320:15	–	prion

NVD

Vulners

Node

vantage6 vantage6Range<4.0.0

[
  {
    "vendor": "vantage6",
    "product": "vantage6",
    "versions": [
      {
        "version": "< 4.0.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst
github	www.github.com/vantage6/vantage6/pull/711
github	www.github.com/vantage6/vantage6/security/advisories/GHSA-gc57-xhh5-m94r

Parameter	Position	Path	Description	CWE
{id}	path	/api/collaboration/{id}/task	Inadequate authorization check where the system verifies permission to view a collaboration but fails to verify permission to view specific tasks within that collaboration.	CWE-284, CWE-863

17 Jun 2026 06:22Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.14.3 - 5.4

EPSS0.00497

SSVC