CVE-2023-2268CWE-862

Plane v0.7.1 - Unauthorized access to files

High · published July 15, 2023

CVSS v3.1
7.1
EPSS
1%
Percentile
51.0
In the wild
Unconfirmed
What it is

Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00662 · 51.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-07-15T18:37Z
EPSS history
Timeline
  • 15 JUL 18:37Z
    Plane v0.7.1 - Unauthorized access to files
    cvelistv5