Improper Restriction of Rendered UI Layers or Frames in pyload/pyload
CVE-2023-0057

3.1LOW

Key Information:

Vendor
Pyload
Status
Pyload/pyload
Vendor
CVE Published:
5 January 2023

Summary

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33.

Affected Version(s)

pyload/pyload < 0.5.0b3.dev33

References

https://huntr.dev/bounties/12b64f91-d048-490c-94b0-37514b...
https://github.com/pyload/pyload/commit/bd2a31b7de54570b9...

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

CVSS V3.0

Score:
3.1
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.