CVE-2023-3069
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
An unverified password change exists in the GitHub repository tsolucio/corebos prior to version 8, which may lead to unauthorized access.
Risk Assessment
Organizations may be at risk of unauthorized access to user accounts, potentially leading to data loss or privacy breaches.
Recommendation
It is recommended to upgrade to version 8 or later to mitigate this vulnerability.
Other vulnerabilities in tsolucio/corebos
See all- CVE-2023-3073Medium
A Cross-site Scripting (XSS) vulnerability was identified in the GitHub repository tsolucio/corebos prior to version 8 via evvtgendoc.
- CVE-2023-3075Medium
A Cross-Site Request Forgery (CSRF) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.
- CVE-2023-3074Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8, allowing malicious code to be stored in the application.
- CVE-2023-3071Medium
A Cross-site Scripting (XSS) vulnerability - Stored in the GitHub repository tsolucio/corebos prior to version 8.
- CVE-2023-3070Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8, allowing malicious code to be stored in the application.
Original NVD description (English source)
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.