Lucene search
GoogleOSV:CVE-2023-3290HistoryJul 09, 2024 - 11:15 a.m.
CVE-2023-3290
2024-07-0911:15:12
Google
osv.dev
bola vulnerability
post request
unauthorized user creation
data manipulation
software
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
AI Score
6.5
Confidence
Low
A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results in unauthorized data manipulation.
Related
cvelist
cvelist
cve
cve
CVE-2023-3290
2024-07-09 11:15:12
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-3290
2024-07-09 11:15:12
veracode
veracode
Authorization Bypass
2024-07-12 04:37:53
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
AI Score
6.5
Confidence
Low
Related for OSV:CVE-2023-3290