Lucene search

K
nvd[email protected]NVD:CVE-2023-0919
HistoryFeb 19, 2023 - 3:15 p.m.

CVE-2023-0919

2023-02-1915:15:10
CWE-306
web.nvd.nist.gov
6
github
authentication
critical function
repository
kareadita
kavita

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

25.5%

Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0.

Affected configurations

Nvd
Node
kavitareaderkavitaRange<0.7.0
VendorProductVersionCPE
kavitareaderkavita*cpe:2.3:a:kavitareader:kavita:*:*:*:*:*:*:*:*

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

25.5%

Related for NVD:CVE-2023-0919