1 matches found
CVE-2023-38487: Authentication Bypass by Alternate Name
HedgeDoc is software for creating real-time collaborative markdown notes. Prior to version 1.9.9, the API of HedgeDoc 1 can be used to create notes with an alias matching the ID of existing notes. The affected existing note can then not be accessed anymore and is effectively hidden by the new one...
8.2CVSS7.4AI score0.00794EPSS
SaveExploits1References2
20