Lucene search

K
cveMitreCVE-2023-45899
HistoryOct 31, 2023 - 2:15 a.m.

CVE-2023-45899

2023-10-3102:15:07
CWE-863
mitre
web.nvd.nist.gov
31
cve-2023-45899
superusersetusermodulefrontcontroller
idnovate superuser
authentication bypass
security vulnerability
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

29.3%

An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call.

Affected configurations

Nvd
Node
idnovatesuperuserRange2.3.52.4.2prestashop
VendorProductVersionCPE
idnovatesuperuser*cpe:2.3:a:idnovate:superuser:*:*:*:*:*:prestashop:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

29.3%

Related for CVE-2023-45899