Lucene search
GoogleOSV:GHSA-V7PX-46V9-5QWPHistoryMar 25, 2024 - 7:43 p.m.
Storefront user can access history and most viewed data from matching back-office user with the same ID
2024-03-2519:43:06
Google
osv.dev
4
navigation
json
matching ids
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0
Percentile
9.0%
Impact
Navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of back-office user.
Related
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-48296
2024-03-25 19:15:57
cve
cve
CVE-2023-48296
2024-03-25 19:15:57
osv
osv
CVE-2023-48296
2024-03-25 19:15:57
veracode
veracode
Information Disclosure
2024-03-29 08:26:51
cvelist
cvelist
github
github
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0
Percentile
9.0%
Related for OSV:GHSA-V7PX-46V9-5QWP