Lucene search
GoogleOSV:CVE-2023-38048HistoryJul 09, 2024 - 11:15 a.m.
CVE-2023-38048
2024-07-0911:15:10
Google
osv.dev
1
bola vulnerability
get
put
delete
provider
unauthorized access
data manipulation
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
6.5
Confidence
Low
A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} allows a low privileged user to fetch, modify or delete a privileged user (provider). This results in unauthorized access and unauthorized data manipulation.
Related
nvd
nvd
CVE-2023-38048
2024-07-09 11:15:10
cvelist
cvelist
vulnrichment
vulnrichment
veracode
veracode
Unauthorized Access
2024-07-24 05:50:31
cve
cve
CVE-2023-38048
2024-07-09 11:15:10
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
6.5
Confidence
Low
Related for OSV:CVE-2023-38048