CVE-2023-48253
The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By abusing this vulnerab…
Published: 2024-01-10 · CVSS: 8.8 · CVSS 3.1
The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By abusing this vulnerability it is possible to exfiltrate other users’ password hashes or update them with arbitrary values and access their accounts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7