Lucene search

K
osvGoogleOSV:GO-2023-2023
HistoryAug 21, 2024 - 2:17 p.m.

Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker

2024-08-2114:17:52
Google
osv.dev
3
netmaker
idor
password
unauthorized
updates
software

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

35.3%

Netmaker IDOR Allows User to Update Other User’s Password in github.com/gravitl/netmaker

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

35.3%

Related for OSV:GO-2023-2023