by Kastro
Paper/Archive/CVE-2023-6718

CVE-2023-6718

Repox Repox — Authentication Bypass Using an Alternate Path or Channel in Repox

EPSS 0.9%CVSS 9.4
critical.is priorityof 100
40
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 58.4.584 × 2011.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to the lack of any authentication method, resulting in the alteration or creation of users.

Affected

ProductAffectedFixed inSource
Repox≤ 2.3.7–CNA

Scores by source

INCIBE (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refincibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox