VULNERABILITY INTELLIGENCE

CVE-2023-39446

CVSS score8.9 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2023-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

Description

Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the headers that is necessary to create specially designed URLs and originate malicious actions when a legitimate user is logged into the web application.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-352

Primary references