Lucene search
HistoryDec 15, 2023 - 10:15 a.m.
CVE-2023-48393
kaifa technology
webitr
online attendance system
remote attacker
sensitive system information
error message
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
25.4%
Kaifa Technology WebITR is an online attendance system. A remote attacker with regular user privilege can obtain partial sensitive system information from error message.
Affected configurations
Node
kaifawebitr_attendance_systemMatch2.1.0.23
Related
cvelist
cvelist
CVE-2023-48393 Kaifa Technology WebITR - Error Message Leakage
2023-12-15 09:22:49
cve
cve
CVE-2023-48393
2023-12-15 10:15:07
prion
prion
Design/Logic Flaw
2023-12-15 10:15:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
25.4%
Related for NVD:CVE-2023-48393