CVE-2023-38348

HighCVSS 8.8

Published: 09/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

Summary

A CSRF issue was discovered in LWsystems Benno MailArchiv version 2.10.1.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized actions on behalf of a logged-in user, potentially leading to data loss or privacy breaches.

Recommendation

It is recommended to update to the latest version of the software to mitigate the risks associated with this vulnerability.

Other vulnerabilities in LWsystems Benno MailArchiv 2.10.1

CVE-2023-38347Medium
An issue was discovered in LWsystems Benno MailArchiv version 2.10.1 that allows attackers to exploit an XSS vulnerability via JavaScript content in a mailbox.

Original NVD description (English source)

A CSRF issue was discovered in LWsystems Benno MailArchiv 2.10.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS