Lucene search

TR-CERTCVELIST:CVE-2023-1246

HistoryMar 10, 2023 - 10:58 a.m.

CVE-2023-1246 Files or Directories Accessible to External Parties in Saysis Starcities

2023-03-1010:58:45

CWE-552

TR-CERT

www.cve.org

saysis starcities

vulnerability

cve-2023-1246

external parties access

data collection

common resource locations

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

51.1%

JSON

Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.This issue affects Starcities: through 1.3.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Starcities",
    "vendor": "Saysis",
    "versions": [
      {
        "lessThanOrEqual": "1.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-23-0140

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

51.1%

JSON

Related for CVELIST:CVE-2023-1246