by Kastro
Paper/Archive/CVE-2023-48028

CVE-2023-48028

mitre — kodbox 1.46.01 has a security flaw that enables user enumeration.

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 65.9.659 × 2013.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgist.github.com/bugplorer/9ae8ad7a9f2a3053ebd07a1b7b54deaerefnitipoom-jar.github.io/CVE-2023-48028refnitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48028