Lucene search
Ubuntu.comUB:CVE-2023-32725HistoryDec 18, 2023 - 12:00 a.m.
CVE-2023-32725
2023-12-1800:00:00
ubuntu.com
ubuntu.com
45
url widget
unauthorized access
session cookie
frontend
scheduled reports
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
39.1%
The website configured in the URL widget will receive a session cookie when
testing or executing scheduled reports. The received session cookie can
then be used to access the frontend as the particular user.
Related
prion
prion
Session fixation
2023-12-18 10:15:00
nvd
nvd
CVE-2023-32725
2023-12-18 10:15:06
cve
cve
CVE-2023-32725
2023-12-18 10:15:06
cvelist
cvelist
debiancve
debiancve
CVE-2023-32725
2023-12-18 10:15:06
redos
redos
ROS-20240328-05
2024-03-28 00:00:00
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
39.1%
Related for UB:CVE-2023-32725