Lucene search

TR-CERTCVE-2023-5921

HistoryNov 22, 2023 - 9:15 a.m.

CVE-2023-5921

2023-11-2209:15:07

CWE-841

TR-CERT

web.nvd.nist.gov

cve-2023-5921

improper enforcement

behavioral workflow

dece software geodi

functionality bypass

nvd

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.9

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.This issue affects Geodi: before 8.0.0.27396.

Affected configurations

Nvd

Node

decesoftwaregeodiRange<8.0.0.27396

VendorProductVersionCPE
decesoftwaregeodi*cpe:2.3:a:decesoftware:geodi:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
decesoftware	geodi	*	cpe:2.3:a:decesoftware:geodi::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Geodi",
    "vendor": "DECE Software",
    "versions": [
      {
        "lessThan": "8.0.0.27396",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-23-0650

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.9

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-5921