Lucene search

K
cveMitreCVE-2023-48833
HistoryDec 07, 2023 - 7:15 a.m.

CVE-2023-48833

2023-12-0707:15:11
CWE-400
mitre
web.nvd.nist.gov
15
cve-2023-48833
time slots booking calendar
resource exhaustion
rate limiting
security vulnerability
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

21.7%

A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion.

Affected configurations

Nvd
Node
phpjabberstime_slots_booking_calendarMatch4.0
VendorProductVersionCPE
phpjabberstime_slots_booking_calendar4.0cpe:2.3:a:phpjabbers:time_slots_booking_calendar:4.0:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

21.7%

Related for CVE-2023-48833