Lucene search
HistoryMay 23, 2023 - 4:15 a.m.
CVE-2023-2844
authorization bypass
github
cloudexplorer-lite
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
34.5%
Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0.
Affected configurations
Node
fit2cloudcloudexplorer_liteRange<1.1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fit2cloud | cloudexplorer_lite | * | cpe:2.3:a:fit2cloud:cloudexplorer_lite:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-2844
2023-05-23 04:15:09
huntr
huntr
IDOR 漏洞使得攻击者可以在一个组织内任意添加、删除、修改工作空间
2023-05-13 14:07:28
osv
osv
CVE-2023-2844
2023-05-23 04:15:09
prion
prion
Authorization
2023-05-23 04:15:00
cvelist
cvelist
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
34.5%
Related for NVD:CVE-2023-2844