Lucene search

[email protected]NVD:CVE-2023-31824

HistoryJul 13, 2023 - 3:15 p.m.

CVE-2023-31824

2023-07-1315:15:09

[email protected]

web.nvd.nist.gov

dericia co. ltd

delicia v.13.6.1

remote attacker

sensitive information

miniapp delicia function

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

70.8%

JSON

An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function.

Affected configurations

Nvd

Node

dericiadeliciaMatch13.6.1

VendorProductVersionCPE
dericiadelicia13.6.1cpe:2.3:a:dericia:delicia:13.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dericia	delicia	13.6.1	cpe:2.3:a:dericia:delicia:13.6.1:::::::*

References

delicia.com

dericia.com

github.com/syz913/CVE-reports/blob/main/CVE-2023-31824.md

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

70.8%

JSON

Related for NVD:CVE-2023-31824

prion1 cvelist1 cve1