Skip to content
OpenAdvisories
Unscored CVE-2023-38752 EUVD-2023-42527GHSA-x2ph-h54q-c64j

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authoriz…

Published Aug 9, 2023 · Updated Oct 10, 2024 · Assigned by jpcert

Vendor: Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) Product: Special Interest Group Network for Analysis and Liaison

Description

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings.

Affected products

VendorProductAffectedFixed
Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 —

References