5 matches found
CVE-2023-1541
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
6CVSS6.7AI score0.00644EPSS
SaveExploits1References1
CVE-2023-1541
CVE-2023-1541 affects the open-source project answerdev/answer prior to version 1.0.6. The issue is a Business Logic Error arising from improper permission handling in the password-reset workflow (the /answer/admin/api/user/password path). An attacker with low privileges can modify the user_id pa...
6CVSS4.3AI score0.00644EPSS
SaveExploits1References2Affected Software1
CVE-2023-1541 Business Logic Errors in answerdev/answer
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
6CVSS5.4AI score
SaveExploits0References4
20