Lucene search
GoogleOSV:CVE-2023-38991HistoryAug 04, 2023 - 12:15 a.m.
CVE-2023-38991
2023-08-0400:15:13
Google
osv.dev
5
actmodelcontroller
jeesite v1.2.6
authenticated attackers
delete function
administrator
software
cve-2023-38991
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
22.5%
An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete models created by the Administrator.
References
Related
cvelist
cvelist
CVE-2023-38991
2023-08-03 00:00:00
prion
prion
Information disclosure
2023-08-04 00:15:00
cve
cve
CVE-2023-38991
2023-08-04 00:15:13
nvd
nvd
CVE-2023-38991
2023-08-04 00:15:13
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
22.5%
Related for OSV:CVE-2023-38991