CVE-2023-6401

🗓️ 30 Nov 2023 14:31:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

Vulnerability in NotePad++ up to 8.1 with uncontrolled search pat

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-6401	19 Jun 202503:00	–	circl
CNNVD	Notepad++ Code Issue Vulnerability	30 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-6401 NotePad++ dbghelp.exe uncontrolled search path	30 Nov 202314:31	–	cvelist
GithubExploit	Exploit for Uncontrolled Search Path Element in Notepad-Plus-Plus Notepad\+\+	18 Jun 202519:59	–	githubexploit
EUVD	EUVD-2023-58638	3 Oct 202520:07	–	euvd
Tenable Nessus	Notepad++ < 8.1.1 Arbitrary Code Execution	9 Aug 202400:00	–	nessus
NVD	CVE-2023-6401	30 Nov 202315:15	–	nvd
Prion	Design/Logic Flaw	30 Nov 202315:15	–	prion
Positive Technologies	PT-2023-32639 · Notepad++ · Notepad++	30 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-6401	23 May 202502:05	–	redhatcve

NVD

Vulners

Node

notepad-plus-plus notepad++Range≤8.1

[
  {
    "vendor": "n/a",
    "product": "NotePad++",
    "versions": [
      {
        "version": "8.0",
        "status": "affected"
      },
      {
        "version": "8.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
dbghelp.dll	path	C:\Program Files\Notepad++\dbghelp.dll	DLL search order hijacking in Notepad++ allows arbitrary code execution by placing a malicious dbghelp.dll in the application directory.	CWE-427

21 Nov 2024 08:43Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.3 - 7.8

CVSS 24.3

CVSS 35.3

EPSS0.00026

CWE-427

cve-2023-6401 vulnerability notepad++file dbghelp.exe uncontrolled search path local attack vdb-246421 nvd