PT-2023-24464 · Bookeen · Bookreen

Anil Celi̇k · Publicado 2023-09-05 · Atualizado 2026-05-22 · CVE-2023-3374

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bookreen versions prior to 3.0.0

Description The issue is related to an Incomplete List of Disallowed Inputs vulnerability in Bookreen, which allows Privilege Escalation.

Recommendations For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue.

Correção

LPE

Incomplete List of Disallowed Inputs

Enumeração de Fraquezas

CWE-184

Identificadores relacionados

CVE-2023-3374

Produtos afetados

Bookreen

Referências · 8

• https://t.me/cveNotify/164530 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-3374 · Nota de Segurança
• https://t.me/cibsecurity/69866 · Publicação no Telegram
• https://usom.gov.tr/bildirim/tr-23-0489 · Nota
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0489 · Nota
• https://twitter.com/cracbot/status/1699301494858895859 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1699100219034526118 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-3374 · Aviso do Fabricante