PT-2023-6678 · Kareadita · Kavita

CVE-2023-0919

·

Publicado

2023-02-19

·

Atualizado

2023-10-27

CVSS v2.0

8.5

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:N
Name of the Vulnerable Software and Affected Versions kareadita/kavita versions prior to 0.7.0
Description The issue is related to a missing authentication for a critical function in the kareadita/kavita GitHub repository. This could allow a remote attacker to impact the confidentiality and integrity of protected information.
Recommendations For versions prior to 0.7.0, update to version 0.7.0 or later to resolve the issue. As a temporary workaround, consider restricting access to critical functions until a patch is applied.

Exploit

Correção

Missing Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-07448
CVE-2023-0919

Produtos afetados

Kavita