CVE-2023-48365

creationtimestamp| type| source ---|---|--- 2023-11-30 08:45:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus28/2023 2023-11-30 17:55:24+00:00| seen| https://t.me/truesecator/5149 2023-12-03 17:01:28+00:00| seen| https://t.me/redfoxsec/24 2023-12-22 11:44:34+00:00| seen|...

VulnCheck KEV: CVE-2023-48365

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software...

CVE-2023-48365

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backe...

CVE-2023-48365

CVE-2023-48365 affects Qlik Sense Enterprise for Windows. The issue arises from improper validation of HTTP headers, enabling an unauthenticated remote attacker to tunnel HTTP requests and execute them on the backend server hosting the repository application (RCE potential). This vulnerability is...

CVE-2023-48365

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backe...