Lucene search

TR-CERTCVELIST:CVE-2023-5921

HistoryNov 22, 2023 - 9:03 a.m.

CVE-2023-5921 Function Bypass in Geodi

2023-11-2209:03:14

CWE-841

TR-CERT

www.cve.org

cve-2023-5921

geodi

function bypass

dece software

improper enforcement

behavioral workflow

vulnerability

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

9.0%

JSON

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.This issue affects Geodi: before 8.0.0.27396.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Geodi",
    "vendor": "DECE Software",
    "versions": [
      {
        "lessThan": "8.0.0.27396",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-23-0650

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2023-5921