CVE-2023-3303
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Improper access control exists in the GitHub repository admidio/admidio prior to version 4.2.9.
Risk Assessment
Organizations may be exposed to unauthorized access to application data or functions, potentially leading to information leakage.
Recommendation
It is recommended to upgrade to version 4.2.9 or later to mitigate this vulnerability.
Other vulnerabilities in admidio/admidio
See all- CVE-2023-4190Medium
Insufficient session expiration in the GitHub repository admidio/admidio prior to version 4.2.11 may lead to unauthorized access.
- CVE-2023-3692High
In the GitHub repository admidio/admidio prior to version 4.2.10, there is a vulnerability allowing unrestricted upload of files with dangerous types.
- CVE-2023-3302High
In the GitHub repository admidio/admidio prior to version 4.2.9, there is improper neutralization of formula elements in a CSV file.
Original NVD description (English source)
Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS