CVE-2023-4837

Published Oct 10, 2023

Last updated 3 months ago

Overview

Description: SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including creation of additional accounts with administrative privileges. This issue affects all versions of SmodBIP. SmodBIP is no longer maintained and the vulnerability will not be fixed.
Source: cvd@cert.pl
NVD status: Modified
CNA Tags: unsupported-when-assigned

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: CWE-352
cvd@cert.pl: CWE-352

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:smod:smodbip:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F9B45085-41FA-4406-A4CE-1010C45DD858"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References