CVE-2023-0574CWE-307CWE-915CWE-918

Server-Side Request Forgery

Medium · published February 9, 2023

CVSS v3.1
6.8
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte Managed: from 2.0.0.0 through 2.13.0.0

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00637 · 49.9th percentile
Weaknesses
CWE-307 · Improper Restriction of Excessive Authentication Attempts; CWE-915 · Improperly Controlled Modification of Dynamically-Determined Object Attributes; CWE-918 · Server-Side Request Forgery (SSRF)
Published
2023-02-09T14:55Z
EPSS history
Timeline
  • 09 FEB 14:55Z
    Server-Side Request Forgery
    cvelistv5