CVE-2023-4560

Summary

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.

Affected Software

Weaknesses

• CWE-612: CWE-612 Improper Authorization of Index Containing Sensitive Information

ADP Enrichment

CVE Program Container

Additional References

• https://huntr.dev/bounties/86f06e28-ed8d-4f96-b4ad-e47f2fe94ba6
• https://github.com/omeka/omeka-s/commit/b3d8871f22e50ff96a7070fd0be18a0df7b6cbe7

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://huntr.dev/bounties/86f06e28-ed8d-4f96-b4ad-e47f2fe94ba6
• https://github.com/omeka/omeka-s/commit/b3d8871f22e50ff96a7070fd0be18a0df7b6cbe7

• ←Previous
• Next→