CVE Catalog
CVE-2023-3253
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.39%
31th percentile - higher than 31% of all known CVEs
Summary
An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application.
Risk Assessment
This vulnerability may lead to the disclosure of user information, increasing the risk of social engineering attacks and privacy breaches.
Recommendation
It is recommended to review and improve the authorization mechanisms in the application to restrict access to user information only to authorized personnel.
Original NVD description (English source)
An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application.