CVE-2023-22300

CVE-2023-22300

Medium · published March 27, 2023

CVSS v3.1
6.1
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unauthorized actions by viewing the logs. This action would also grant the attacker privilege escalation.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00516 · 43.0th percentile
Published
2023-03-27T19:36Z
EPSS history
Timeline
  • 27 MAR 19:36Z
    CVE-2023-22300
    cvelistv5