Lucene search

MitreCVE-2023-45899

HistoryOct 31, 2023 - 2:15 a.m.

CVE-2023-45899

2023-10-3102:15:07

CWE-863

mitre

web.nvd.nist.gov

cve-2023-45899

superusersetusermodulefrontcontroller

idnovate superuser

authentication bypass

security vulnerability

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

29.3%

JSON

An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call.

Affected configurations

Nvd

Node

idnovatesuperuserRange2.3.5–2.4.2prestashop

VendorProductVersionCPE
idnovatesuperuser*cpe:2.3:a:idnovate:superuser:*:*:*:*:*:prestashop:*:*

Vendor	Product	Version	CPE
idnovate	superuser	*	cpe:2.3:a:idnovate:superuser::::::prestashop::*

References

security.friendsofpresta.org/modules/2023/10/26/superuser.html

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

29.3%

JSON

Related for CVE-2023-45899