Lucene search
HistoryOct 26, 2023 - 5:15 a.m.
CVE-2023-46754
admin panel
authorization bypass
email otp
vulnerability
cve-2023-46754
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
5.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.
Affected configurations
Node
obl.ongadminRange<1.1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| obl.ong:admin | obl.ong admin | lt | 1.1.2 |
Related
cvelist
cvelist
CVE-2023-46754
2023-10-26 00:00:00
prion
prion
Authorization
2023-10-26 05:15:00
osv
osv
CVE-2023-46754
2023-10-26 05:15:26
nvd
nvd
CVE-2023-46754
2023-10-26 05:15:26
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
5.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
Related for CVE-2023-46754