CVE-2023-3227
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Insufficient granularity of access control exists in the GitHub repository fossbilling/fossbilling prior to version 0.5.0.
Risk Assessment
Inadequate access control may lead to unauthorized access to sensitive data or functionalities within the application.
Recommendation
It is recommended to upgrade to version 0.5.0 or later to improve access control.
Other vulnerabilities in fossbilling/fossbilling
See all- CVE-2023-4005Critical
Insufficient session expiration exists in GitHub repository fossbilling/fossbilling prior to version 0.5.5.
- CVE-2023-3490Critical
There is an SQL Injection vulnerability in the GitHub repository fossbilling/fossbilling prior to version 0.5.3.
- CVE-2023-3521Medium
A Cross-site Scripting (XSS) vulnerability is reflected in the GitHub repository fossbilling/fossbilling prior to version 0.5.4.
- CVE-2023-3493High
In the GitHub repository fossbilling/fossbilling prior to version 0.5.3, there is improper neutralization of formula elements in a CSV file.
- CVE-2023-3491High
In the GitHub repository fossbilling/fossbilling prior to version 0.5.3, there is an unrestricted upload of files with dangerous types.
- CVE-2023-3394Medium
There is a Session Fixation vulnerability in the GitHub repository fossbilling/fossbilling prior to version 0.5.1.
- CVE-2023-3393High
There is a code injection vulnerability in the GitHub repository fossbilling/fossbilling prior to version 0.5.1.
- CVE-2023-3229Medium
Business logic errors in the GitHub repository fossbilling/fossbilling prior to version 0.5.0 may lead to unauthorized access or improper data processing.
- CVE-2023-3228Medium
Business Logic Errors in the GitHub repository fossbilling/fossbilling prior to version 0.5.0 may lead to unauthorized access or improper data processing.
Original NVD description (English source)
Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0.