Lucene search

TR-CERTVULNRICHMENT:CVE-2023-6676

HistoryFeb 02, 2024 - 1:07 p.m.

CVE-2023-6676 Cross Site Request Forgery in National Keep's CyberMath

2024-02-0213:07:51

CWE-352

TR-CERT

github.com

cve-2023-6676

csrf

national keep cybermath

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Cross-Site Request Forgery (CSRF) vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery.This issue affects CyberMath: from v1.4 before v1.5.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:nationalkeep:cybermath:*:*:*:*:*:*:*:*"
    ],
    "vendor": "nationalkeep",
    "product": "cybermath",
    "versions": [
      {
        "status": "affected",
        "version": "1.4",
        "lessThan": "1.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

www.usom.gov.tr/bildirim/tr-24-0080

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2023-6676