Lucene search

K
nvd[email protected]NVD:CVE-2023-3891
HistorySep 15, 2023 - 3:15 a.m.

CVE-2023-3891

2023-09-1503:15:08
CWE-367
web.nvd.nist.gov
race condition
lapce v0.2.8
elevate privileges
system

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

21.6%

Race condition in Lapce v0.2.8 allows an attacker to elevate privileges on the system

Affected configurations

NVD
Node
lapcelapceMatch0.2.8

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

21.6%

Related for NVD:CVE-2023-3891