Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-46754
HistoryOct 26, 2023 - 12:00 a.m.

CVE-2023-46754

2023-10-2600:00:00
mitre
github.com
1
authorization bypass
email otp
arbitrary numerical values

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

20.2%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

20.2%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-46754