Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-45659

Published: 17/10/2023 Updated: 30/10/2023
CVSS v3 Base Score: 2.8 | Impact Score: 1.4 | Exploitability Score: 1.3
VMScore: 0

Vulnerability Summary

Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixed in the commit `dbb089315ff3d`. Users are advised to update their installations. There are no known workarounds for this vulnerability.

Vulnerable Product Search on Vulmon Subscribe to Product

engelsystem engelsystem

Github Repositories

https://github.com/sev-hack/sev-hack

About me 👋 🔎 Job title: Application Security Engineer 🌇 Current location: Moscow, Russia 💥 Certificates: OSCP (November 2021) 💢 CVEs: CVE-2023-45659 CVE-2023-45152 CVE-2023-5838 CVE-2023-5840 🍪 Open for collaboration

References

CWE-613https://github.com/engelsystem/engelsystem/security/advisories/GHSA-f6mm-3v2h-jm6xhttps://github.com/engelsystem/engelsystem/commit/dbb089315ff3d8aabc11445e78fb50765208b27dhttps://nvd.nist.govhttps://github.com/sev-hack/sev-hack
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3380CVE-2024-1694local file inclusionCVE-2024-5645CVE-2024-24919XSSCVE-2024-36774CVE-2024-21306SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook