CVE-2023-28698

EPSS 0.4%
Veröffentlicht 02.06.2023 11:15:10
Zuletzt bearbeitet 21.11.2024 07:55:49
Quelle twcert@cert.org.tw
CVE-Watchlists
Login
Unerledigt
Login

Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt service.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Wddgroup ≫ Fantsy Version2.1.8

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.4%	0.599

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
twcert@cert.org.tw	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://www.twcert.org.tw/tw/cp-132-7101-f88db-1.html

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-28698

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-28698

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-28698

EUVD