CVE-2023-3303: medium-severity vulnerability in admidio/admidio
Improper Access Control in admidio/admidio
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.4epss 0.4%
Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
Affected products
admidio · admidio/admidioRelated CVEs — admidio/admidio
In the same product, most dangerous first.
CVE-2022-0991HIGHInsufficient Session Expiration in admidio/admidioEPSS 1.0%CVE-2023-3692MEDIUMUnrestricted Upload of File with Dangerous Type in admidio/admidioEPSS 1.0%CVE-2023-4190MEDIUMInsufficient Session Expiration in admidio/admidioEPSS 0.6%CVE-2023-3109MEDIUMCross-site Scripting (XSS) - Stored in admidio/admidioEPSS 0.5%CVE-2023-3302MEDIUMImproper Neutralization of Formula Elements in a CSV File in admidio/admidioEPSS 0.5%CVE-2023-3304MEDIUMImproper Access Control in admidio/admidioEPSS 0.4%