Lucene search

K
cvelist@huntrdevCVELIST:CVE-2023-2429
HistoryApr 30, 2023 - 12:00 a.m.

CVE-2023-2429 Improper Access Control in thorsten/phpmyfaq

2023-04-3000:00:00
CWE-284
@huntrdev
www.cve.org
improper access control
thorsten
phpmyfaq
github repository
3.1.13

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13.

CNA Affected

[
  {
    "vendor": "thorsten",
    "product": "thorsten/phpmyfaq",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "3.1.13",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

Related for CVELIST:CVE-2023-2429