Lucene search

@huntrdevCVE-2023-0569

HistoryJan 29, 2023 - 5:15 p.m.

CVE-2023-0569

2023-01-2917:15:08

CWE-521

@huntrdev

web.nvd.nist.gov

cve-2023-0569

weak password

github

repository

publify

nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

27.7%

JSON

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.

Affected configurations

Nvd

Node

publify_projectpublifyRange<9.2.10

VendorProductVersionCPE
publify_projectpublify*cpe:2.3:a:publify_project:publify:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
publify_project	publify	*	cpe:2.3:a:publify_project:publify::::::::

CNA Affected

[
  {
    "vendor": "publify",
    "product": "publify/publify",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9.2.10",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/publify/publify/commit/8905e4e639cf03b758da558568a86c9816253b2d

huntr.dev/bounties/81b1e1da-10dd-435e-94ae-4bdd41df6df9

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

27.7%

JSON

Related for CVE-2023-0569