CVE-2023-37362

HighCVSS 7.2

Published: 19/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

39th percentile - higher than 39% of all known CVEs

Summary

Weintek Weincloud version 0.13.6 may allow an attacker to abuse the registration functionality to log in with testing credentials to the official website.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to user accounts, posing a risk of data leakage or other malicious activities.

Recommendation

It is recommended to update to the latest version of Weintek Weincloud and implement additional security measures such as login credential verification.

Other vulnerabilities in Weintek Weincloud v0.13.6

See all

CVE-2023-35134High
Weintek Weincloud version 0.13.6 could allow an attacker to reset a password using the corresponding account’s JWT token.
CVE-2023-34429High
Weintek Weincloud version 0.13.6 could allow an attacker to cause a denial-of-service condition by sending a forged JWT token.

Original NVD description (English source)

Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website.