Lucene search

Fluid AttacksCVE-2023-43739

HistorySep 28, 2023 - 10:15 p.m.

CVE-2023-43739

2023-09-2822:15:10

CWE-89

Fluid Attacks

web.nvd.nist.gov

cve-2023-43739

nvd

resource

validation

database

security

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

46.7%

JSON

The ‘bookisbn’ parameter of the cart.php resource

does not validate the characters received and they

are sent unfiltered to the database.

Affected configurations

Nvd

Node

online_book_store_project_projectonline_book_store_projectMatch1.0

VendorProductVersionCPE
online_book_store_project_projectonline_book_store_project1.0cpe:2.3:a:online_book_store_project_project:online_book_store_project:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
online_book_store_project_project	online_book_store_project	1.0	cpe:2.3:a:online_book_store_project_project:online_book_store_project:1.0:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Online Book Store Project",
    "vendor": "Online Book Store Project",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

References

fluidattacks.com/advisories/filth

projectworlds.in/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

46.7%

JSON

Related for CVE-2023-43739