Lucene search
+L

2 matches found

OSV
OSV
•added 2023/12/18 9:15 a.m.•14 views

CVE-2023-41314

The api /api/snapshot and /api/getlogfile would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE node. Please upgrade to 2.0.3 to fix these issues...

8.2CVSS5.9AI score0.00898EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/18 12:00 a.m.•5 views

CVE-2023-41314: Incorrect Authorization

The api /api/snapshot and /api/getlogfile would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE node. Please upgrade to 2.0.3 to fix these issues...

8.2CVSS7.7AI score0.00898EPSS
SaveExploits0References2
Rows per page
Query Builder