Lucene search
HistoryOct 30, 2023 - 12:15 a.m.
CVE-2023-46863
peppermint ticket management
remote attack
file read
post request
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
56.0%
Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/download?filepath=./…/ POST request.
Affected configurations
Node
peppermintpeppermintRange<0.2.4
Related
cve
cve
CVE-2023-46863
2023-10-30 00:15:39
cvelist
cvelist
CVE-2023-46863
2023-10-29 00:00:00
osv
osv
CVE-2023-46863
2023-10-30 00:15:39
prion
prion
Cross site request forgery (csrf)
2023-10-30 00:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
56.0%
Related for NVD:CVE-2023-46863