PT-2023-30800 · Smodbip · Smodbip

Krzysztof Zając · Published 2023-10-10 · Updated 2024-08-02 · CVE-2023-4837

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SmodBIP (affected versions not specified)

Description SmodBIP is vulnerable to Cross-Site Request Forgery, which could be used to induce logged-in users to perform unintended actions, including creation of additional accounts with administrative privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-4837

Affected Products

Smodbip

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-4837 · Security Note
• https://t.me/cvenotify/59171 · Telegram Post
• https://cert.pl/en/posts/2023/10/CVE-2023-4837 · Note
• https://t.me/cibsecurity/71902 · Telegram Post
• https://t.me/cvenotify/88485 · Telegram Post
• https://smod.pl · Note
• https://cert.pl/posts/2023/10/CVE-2023-4837 · Note