CVE-2023-4560

MediumCVSS 6.5

Published: 28/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

44th percentile - higher than 44% of all known CVEs

Improper authorization of an index containing sensitive information exists in the GitHub repository omeka/omeka-s prior to version 4.0.4.

Organizations may be exposed to the disclosure of sensitive data, potentially leading to serious privacy and security breaches.

It is recommended to upgrade to version 4.0.4 or later to mitigate this vulnerability.

Original NVD description (English source)

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.