Lucene search
HistoryDec 13, 2023 - 9:15 a.m.
CVE-2023-6718
cve-2023-6718
repox
authentication bypass
post request
remote user
alteration
creation
users
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
31.9%
An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to the lack of any authentication method, resulting in the alteration or creation of users.
Affected configurations
Node
europeanarepoxMatch2.3.7
Related
prion
prion
Authentication flaw
2023-12-13 09:15:00
cve
cve
CVE-2023-6718
2023-12-13 09:15:34
cvelist
cvelist
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
31.9%
Related for NVD:CVE-2023-6718