Lucene search
MitreCVE-2023-49948HistoryDec 03, 2023 - 7:15 p.m.
CVE-2023-49948
2023-12-0319:15:08
mitre
web.nvd.nist.gov
14
cve-2023-49948
forgejo
url manipulation
security vulnerability
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
41.2%
Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension) to a URL.
Affected configurations
Node
forgejoforgejoRange<1.20.5-1
Related
nvd
nvd
CVE-2023-49948
2023-12-03 19:15:08
prion
prion
Code injection
2023-12-03 19:15:00
veracode
veracode
Information Disclosure
2023-12-04 10:10:49
gitlab
gitlab
Exposure of Sensitive Information to an Unauthorized Actor
2023-12-03 00:00:00
cvelist
cvelist
CVE-2023-49948
2023-12-03 00:00:00
githubexploit
githubexploit
Exploit for CVE-2023-49948
2023-12-04 00:17:44
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
41.2%
Related for CVE-2023-49948