CVE-2023-34421

MediumCVSS 6.5

Published: 26/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

32th percentile - higher than 32% of all known CVEs

Summary

An authenticated LXCA user with elevated privileges may replace filesystem data through a specifically crafted web API call due to insufficient input validation.

Risk Assessment

The ability to modify filesystem data by an authorized user could lead to serious data integrity breaches and potential attacks on the system.

Recommendation

It is recommended to implement additional input validation mechanisms in the API and review user permissions to mitigate the risk of abuse.

Original NVD description (English source)

A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically crafted web API call due to insufficient input validation.