Lucene search
HistoryNov 20, 2023 - 10:15 p.m.
CVE-2023-48176
cve-2023-48176
insecure permissions
websiteguide v.0.2
remote attack
escalated privileges
crafted jwt
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.4 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
51.1%
An Insecure Permissions issue in WebsiteGuide v.0.2 allows a remote attacker to gain escalated privileges via crafted jwt (JSON web token).
Affected configurations
Node
mizhexiaoxiaowebsiteguideMatch0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| mizhexiaoxiao:websiteguide | mizhexiaoxiao websiteguide | eq | 0.2 |
Related
nvd
nvd
CVE-2023-48176
2023-11-20 22:15:07
prion
prion
Code injection
2023-11-20 22:15:00
cvelist
cvelist
CVE-2023-48176
2023-11-20 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.4 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
51.1%
Related for CVE-2023-48176