Lucene search
@huntrdevCVELIST:CVE-2023-1712HistoryMar 30, 2023 - 12:00 a.m.
CVE-2023-1712 Use of Hard-coded, Security-relevant Constants in deepset-ai/haystack
2023-03-3000:00:00
CWE-547
@huntrdev
www.cve.org
2
cve-2023-1712
github repository
deepset-ai/haystack
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
53.2%
Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30.
CNA Affected
[
{
"vendor": "deepset-ai",
"product": "deepset-ai/haystack",
"versions": [
{
"version": "unspecified",
"lessThan": "0.1.30",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
osv
osv
Use of hard-coded, security-relevant constants in deepset-ai/haystack
2023-03-30 12:30:15
CVE-2023-1712
2023-03-30 10:15:07
huntr
huntr
Annotation tool: token forgery using jwt secret to claim super admin role
2023-03-22 18:47:40
veracode
veracode
Authentication Bypass
2023-04-06 14:51:13
prion
prion
Hardcoded credentials
2023-03-30 10:15:00
cve
cve
CVE-2023-1712
2023-03-30 10:15:07
github
github
Use of hard-coded, security-relevant constants in deepset-ai/haystack
2023-03-30 12:30:15
nvd
nvd
CVE-2023-1712
2023-03-30 10:15:07
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
53.2%
Related for CVELIST:CVE-2023-1712