CVE-2023-33668

CriticalCVSS 9.8

Published: 12/07/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

The vulnerability in DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and take over accounts on shared computers.

Risk Assessment

The risk includes exposure of sensitive personal data and unauthorized account takeover, potentially leading to privacy breaches and reputational damage.

Recommendation

It is recommended to immediately update DigiExam to the latest version and implement integrity verification mechanisms for native modules on shared computers.

Original NVD description (English source)

DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers.