Lucene search
GoogleOSV:CVE-2023-2260HistoryApr 24, 2023 - 9:15 p.m.
CVE-2023-2260
2023-04-2421:15:09
Google
osv.dev
2
github
authorization bypass
alf.io
software security
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
44.3%
Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
Related
cvelist
cvelist
prion
prion
Authorization
2023-04-24 21:15:00
huntr
huntr
cve
cve
CVE-2023-2260
2023-04-24 21:15:09
nvd
nvd
CVE-2023-2260
2023-04-24 21:15:09
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
44.3%
Related for OSV:CVE-2023-2260