CVE Catalog

CVE-2023-3069

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.60%

44th percentile - higher than 44% of all known CVEs

Summary

An unverified password change exists in the GitHub repository tsolucio/corebos prior to version 8, which may lead to unauthorized access.

Risk Assessment

Organizations may be at risk of unauthorized access to user accounts, potentially leading to data loss or privacy breaches.

Recommendation

It is recommended to upgrade to version 8 or later to mitigate this vulnerability.

Original NVD description (English source)

Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS