CVE-2023-41363

MediumCVSS 4.3

Published: 29/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.

Risk Assessment

This vulnerability may lead to unauthorized modification of user account settings, potentially impacting the security and privacy of data within the organization.

Recommendation

It is recommended to update to the latest version of Cerebrate and restrict user permissions for changing other accounts' settings.

Original NVD description (English source)

In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.