Логотип exploitDog
bind:CVE-2023-48224
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-48224

Количество 2

Количество 2

nvd логотип

CVE-2023-48224

около 2 лет назад

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides Privacy Center allows data subject users to submit privacy and consent requests to data controller users of the Fides web application. Privacy requests allow data subjects to submit a request to access all person data held by the data controller, or delete/erase it. Consent request allows data subject users to modify their privacy preferences for how the data controller uses their personal data e.g. data sales and sharing consent opt-in/opt-out. If `subject_identity_verification_required` in the `[execution]` section of `fides.toml` or the env var `FIDES__EXECUTION__SUBJECT_IDENTITY_VERIFICATION_REQUIRED` is set to `True` on the fides webserver backend, data subjects are sent a one-time code to their email address or phone number, depending on messaging configuration, and the one-time code mus

CVSS3: 8.2
EPSS: Низкий
github логотип

GHSA-82vr-5769-6358

около 2 лет назад

Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification

CVSS3: 8.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-48224

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides Privacy Center allows data subject users to submit privacy and consent requests to data controller users of the Fides web application. Privacy requests allow data subjects to submit a request to access all person data held by the data controller, or delete/erase it. Consent request allows data subject users to modify their privacy preferences for how the data controller uses their personal data e.g. data sales and sharing consent opt-in/opt-out. If `subject_identity_verification_required` in the `[execution]` section of `fides.toml` or the env var `FIDES__EXECUTION__SUBJECT_IDENTITY_VERIFICATION_REQUIRED` is set to `True` on the fides webserver backend, data subjects are sent a one-time code to their email address or phone number, depending on messaging configuration, and the one-time code mus

CVSS3: 8.2
0%
Низкий
около 2 лет назад
github логотип
GHSA-82vr-5769-6358

Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification

CVSS3: 8.2
0%
Низкий
около 2 лет назад

Уязвимостей на страницу