Lucene search

K
nvd[email protected]NVD:CVE-2023-39376
HistorySep 27, 2023 - 3:18 p.m.

CVE-2023-39376

2023-09-2715:18:55
CWE-284
web.nvd.nist.gov
siberiancms network security

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

16.2%

SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network

Affected configurations

NVD
Node
siberiancmssiberiancmsRange4.0.04.20.44
OR
siberiancmssiberiancmsRange5.0.05.0.4

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

16.2%

Related for NVD:CVE-2023-39376