Lucene search
+L

364 matches found

Vulnrichment
Vulnrichment
added 2023/05/25 8:20 a.m.8 views

CVE-2023-2883 IDOR in CBOT's Chatbot

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS7.3AI score0.00683EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/05/25 8:20 a.m.18 views

CVE-2023-2883 IDOR in CBOT's Chatbot

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS8.9AI score0.00683EPSS
Exploits0References2
CVE
CVE
added 2023/05/25 8:20 a.m.48 views

CVE-2023-2883

The CVE-2023-2883 issue affects CBOT Chatbot Core prior to v4.0.3.4 and Panel prior to v4.0.3.7, described as an Authorization Bypass through a User-Controlled Key that enables Authentication Abuse. The vulnerability is documented across sources (NVD entry and CVE records) with a CVSS v3.1 base s...

8.8CVSS7.3AI score0.00683EPSS
Exploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2023/05/25 12:0 a.m.6 views

PT-2023-21994

Name of the Vulnerable Software and Affected Versions CBOT Chatbot versions prior to Core: v4.0.3.4 CBOT Chatbot versions prior to Panel: v4.0.3.7 Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, allowing for Authentication Abuse and...

8.8CVSS7.3AI score0.00683EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2023/05/24 1:15 p.m.4 views

CVE-2023-2065

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS7.3AI score0.00845EPSS
Exploits0References4
OSV
OSV
added 2023/05/24 1:15 p.m.4 views

CVE-2023-2065

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS7.3AI score0.00845EPSS
Exploits0References1
NVD
NVD
added 2023/05/24 1:15 p.m.19 views

CVE-2023-2065

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS8.8AI score0.00845EPSS
Exploits0References3
Prion
Prion
added 2023/05/24 1:15 p.m.14 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28...

6.5CVSS8.7AI score0.00845EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/24 12:4 p.m.9 views

CVE-2023-2065 IDOR in Armoli Technology's Cargo Tracking System

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS7.3AI score0.00845EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/05/24 12:4 p.m.25 views

CVE-2023-2065 IDOR in Armoli Technology's Cargo Tracking System

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS8.9AI score0.00845EPSS
Exploits0References2
CVE
CVE
added 2023/05/24 12:4 p.m.45 views

CVE-2023-2065

CVE-2023-2065 concerns Armoli Technology Cargo Tracking System. Affected: Cargo Tracking System versions before 3558f28. Root cause: Authorization Bypass via a user-controlled key, enabling authentication abuse. Impact: high confidentiality, integrity, and availability (per CVSS 3.1, base score 8...

8.8CVSS7.3AI score0.00845EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/05/23 8:15 p.m.3 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.This issue affects Competition Management System: before 23.07...

8.8CVSS7.3AI score0.00683EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/05/23 8:15 p.m.4 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass. This issue affects Competition Management System: before 23.07...

8.8CVSS7.3AI score0.00683EPSS
Exploits0References3
NVD
NVD
added 2023/05/23 8:15 p.m.12 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass. This issue affects Competition Management System: before 23.07...

8.8CVSS8.8AI score0.00683EPSS
Exploits0References2
Prion
Prion
added 2023/05/23 8:15 p.m.12 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.This issue affects Competition Management System: before 23.07...

6.5CVSS8.7AI score0.00683EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/05/23 7:14 p.m.35 views

CVE-2023-2702

CVE-2023-2702 concerns the Finex Media Competition Management System, where an authorization bypass via a user-controlled key leads to authentication abuse. Affected versions are prior to 23.07. The CVSS 3.1 base score is 8.8 (High) with NETWORK attack vector, LOW access complexity, and impacts t...

8.8CVSS7.3AI score0.00683EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/05/23 7:14 p.m.19 views

CVE-2023-2702 IDOR in Finex Media's Competition Management System

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass. This issue affects Competition Management System: before 23.07...

8.8CVSS8.9AI score0.00683EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.4 views

PT-2023-20903

Name of the Vulnerable Software and Affected Versions Competition Management System versions prior to 23.07 Description The issue allows for authentication abuse and bypass through an authorization bypass vulnerability. This is due to a user-controlled key in the Finex Media Competition Managemen...

8.8CVSS7.3AI score0.00683EPSS
Exploits0References5
NVD
NVD
added 2023/05/20 10:15 a.m.18 views

CVE-2023-2713

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15...

9.8CVSS9.6AI score0.00765EPSS
Exploits0References2
OSV
OSV
added 2023/05/20 10:15 a.m.5 views

CVE-2023-2713

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.This issue affects Rental Module: before 23.05.15...

9.8CVSS7.3AI score0.00765EPSS
Exploits0References1
Rows per page
Query Builder