CVE-2023-34422

MediumCVSS 6.5

Published: 26/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

32th percentile - higher than 32% of all known CVEs

Summary

An authenticated LXCA user with elevated privileges may delete folders in the LXCA filesystem through a specifically crafted web API call due to insufficient input validation.

Risk Assessment

The ability for users with elevated privileges to delete folders poses a risk of data loss and system instability.

Recommendation

It is recommended to implement additional input validation in the API and review user permissions in the system.

Original NVD description (English source)

A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through a specifically crafted web API call due to insufficient input validation.