CVE Catalog

CVE-2023-3229

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.51%

39th percentile - higher than 39% of all known CVEs

Summary

Business logic errors in the GitHub repository fossbilling/fossbilling prior to version 0.5.0 may lead to unauthorized access or improper data processing.

Risk Assessment

Organizations using this version of the software may be at risk of data loss or unauthorized access to systems.

Recommendation

It is recommended to upgrade to version 0.5.0 or later to eliminate these business logic errors.

Original NVD description (English source)

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS