CVE Catalog

CVE-2023-4124

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.54%

41th percentile - higher than 41% of all known CVEs

Summary

Missing authorization in GitHub repository answerdev/answer prior to version 1.1.1 may lead to unauthorized access to resources.

Risk Assessment

The organization may be exposed to unauthorized actions by users, potentially resulting in data loss or privacy breaches.

Recommendation

It is recommended to update to version 1.1.1 or later to mitigate this authorization vulnerability.

Original NVD description (English source)

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS