Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-40515

Опубликовано: 03 мая 2024
Источник: nvd
CVSS3: 7.5
CVSS3: 7.5
EPSS Низкий

Описание

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the joinAddUser method. The issue results from improper input validation. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. . Was ZDI-CAN-20048.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:lg:simple_editor:3.21.0:*:*:*:*:*:*:*

EPSS

Процентиль: 43%
0.00206
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.5
github
почти 2 года назад

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the joinAddUser method. The issue results from improper input validation. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-20048.

EPSS

Процентиль: 43%
0.00206
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo