Lucene search

K
githubexploit431275D1-AF89-5340-A232-230DB4DFF0E6
HistoryMar 21, 2023 - 5:05 p.m.

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Ibexa Ezplatform-Graphql

2023-03-2117:05:07
153
ibexa ezplatform
graphql
information disclosure
exploit
user data
vulnerability
poc
path enumeration
security document
python3 script
cve-2022-41876
hacktricks
graphql-enum-path
skilo
tahiti

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

23.3%

<div>
<img alt=“ibexa logo” width=“600” src="./…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

23.3%

Related for 431275D1-AF89-5340-A232-230DB4DFF0E6