Lucene search

PRIOn knowledge basePRION:CVE-2023-0509

HistoryJan 26, 2023 - 10:15 p.m.

Input validation

2023-01-2622:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

34.8%

JSON

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.

CPENameOperatorVersion
pyloadeq< 2023125
pyload-ngeq< 0.5.0b3.dev44

CPE	Name	Operator	Version
	pyload	eq	< 2023125
	pyload-ng	eq	< 0.5.0b3.dev44

References

github.com/pyload/pyload/commit/a9098bdf7406e6faf9df3da6ff2d584e90c13bbb

huntr.dev/bounties/a370e0c2-a41c-4871-ad91-bc6f31a8e839

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

34.8%

JSON

Related for PRION:CVE-2023-0509