Lucene search
HistoryMay 25, 2023 - 9:15 a.m.
CVE-2023-2881
github
passwords
vulnerability
repository
security
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
45.5%
Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.
Affected configurations
Node
pimcorecustomer-data-frameworkRange<3.3.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pimcore | customer-data-framework | * | cpe:2.3:a:pimcore:customer-data-framework:*:*:*:*:*:*:*:* |
Related
github
github
Pimcore customers' list user password hash is disclosed
2023-05-25 16:57:01
huntr
huntr
all user password hash is disclosed
2023-05-02 14:41:33
osv
osv
Pimcore customers' list user password hash is disclosed
2023-05-25 16:57:01
CVE-2023-2881
2023-05-25 09:15:11
cve
cve
CVE-2023-2881
2023-05-25 09:15:11
prion
prion
Format string
2023-05-25 09:15:00
cvelist
cvelist
veracode
veracode
Password Hash Disclosure
2023-06-08 06:52:39
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
45.5%
Related for NVD:CVE-2023-2881