Lucene search

K
cveMitreCVE-2023-45558
HistoryNov 14, 2023 - 3:15 a.m.

CVE-2023-45558

2023-11-1403:15:09
mitre
web.nvd.nist.gov
10
cve-2023-45558
golden
v13.6.1
crafted notifications
channel access token
leakage
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

36.0%

An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.

Affected configurations

Nvd
Node
golden_projectgoldenMatch13.6.1line
VendorProductVersionCPE
golden_projectgolden13.6.1cpe:2.3:a:golden_project:golden:13.6.1:*:*:*:*:line:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

36.0%

Related for CVE-2023-45558