CVE-2023-0744
Assigner: @huntrdev
Published: 2023-02-08T00:00:00
State: PUBLISHED
title: Improper Access Control in answerdev/answer
descriptions: value: Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.
affected: vendor: answerdev
product: answerdev/answer
versions: version: unspecified
lessThan: 1.0.4
status: affected
versionType: custom
metrics: cvssV3_0: version: 3.0
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
problemTypes: descriptions: type: CWE
description: CWE-284 Improper Access Control
cweId: CWE-284
source: advisory: 35a0e12f-1d54-4fc0-8779-6a4949b7c434
discovery: EXTERNAL