Privilege Escalation Vulnerability in OWASP DefectDojo Affected by Remote Attack
CVE-2023-48171

8.8HIGH

Key Information:

Vendor

Owasp

Status
Defectdojo
Vendor
CVE Published:
12 August 2024

What is CVE-2023-48171?

A vulnerability in OWASP DefectDojo allows an attacker to escalate privileges through the user permissions system. This critical flaw exists in versions prior to 1.5.3.1, enabling unauthorized users to gain elevated permissions, compromising the integrity and confidentiality of the application. Proper access controls and timely updates are essential to mitigate the risks associated with this security issue.

References

https://gccybermonks.com/posts/defectdojo/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.