CVE Catalog

CVE-2023-34965

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.88%

54th percentile - higher than 54% of all known CVEs

Summary

SSPanel-Uim version 2023.3 does not restrict access to the /link/ interface, which can lead to a leak of user information.

Risk Assessment

The lack of access restrictions to the interface may allow unauthorized individuals to access sensitive user data, posing a serious privacy threat.

Recommendation

It is recommended to implement appropriate authorization mechanisms for the /link/ interface to secure user data.

Original NVD description (English source)

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS