Lucene search
HistoryOct 31, 2023 - 9:15 p.m.
CVE-2023-43295
cve
2023
43295
cross site request forgery
vulnerability
click studios
passwordstate
nvd
security
3.5 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.0%
Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to execute arbitrary code via a crafted request.
Affected configurations
Node
clickstudiospasswordstateMatch9.7build_9785-
| CPE | Name | Operator | Version |
|---|---|---|---|
| clickstudios:passwordstate | clickstudios passwordstate | eq | 9.7 |
Related
prion
prion
Cross site request forgery (csrf)
2023-10-31 21:15:00
nvd
nvd
CVE-2023-43295
2023-10-31 21:15:08
cvelist
cvelist
CVE-2023-43295
2023-10-31 00:00:00
3.5 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.0%
Related for CVE-2023-43295