Lucene search
HistoryJul 09, 2024 - 11:15 a.m.
CVE-2023-3288
bola vulnerability
post method
privilege escalation
system user creation
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system. This results in privilege escalation.
Affected configurations
Node
easyappointmentseasyappointmentsRange<1.5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| easyappointments | easyappointments | * | cpe:2.3:a:easyappointments:easyappointments:*:*:*:*:*:*:*:* |
Related
veracode
veracode
Authorization Bypass
2024-07-11 10:44:54
vulnrichment
vulnrichment
osv
osv
CVE-2023-3288
2024-07-09 11:15:12
cve
cve
CVE-2023-3288
2024-07-09 11:15:12
cvelist
cvelist
nessus
nessus
paloalto
paloalto
PAN-OS: File Upload Vulnerability in the Web Interface
2023-12-13 17:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Related for NVD:CVE-2023-3288