CVE Catalog

CVE-2023-3227

MediumCVSS 5.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.41%

32th percentile - higher than 32% of all known CVEs

Summary

Insufficient granularity of access control exists in the GitHub repository fossbilling/fossbilling prior to version 0.5.0.

Risk Assessment

Inadequate access control may lead to unauthorized access to sensitive data or functionalities within the application.

Recommendation

It is recommended to upgrade to version 0.5.0 or later to improve access control.

Original NVD description (English source)

Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS