Back to overview

CVE-2023-40020

CRITICAL
9.9
CVSS 3.1
Description
PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions `app/routes/v3/admin.controller.ts` did not correctly verify whether the user was an administrator (High Level) or moderator (Low Level) causing the request to continue processing. The response would be a 403 with ADMIN_ONLY, however, next() would call leading to any updates/changes in the route to process. This issue has been addressed in version 3.2.49. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Metadata

CVE ID
CVE-2023-40020
State
PUBLISHED
Assigner
GitHub_M
Reserved
2023-08-08 13:46 UTC
Published
2023-08-14 20:03 UTC
Last updated
2024-10-01 19:10 UTC
Primary CWE
CWE-287
CWE-287: Improper Authentication
Vendor / Product
PrivateUploader / PrivateUploader
Sources
cve.org  ·  NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
no
Tech. Impact
partial
Affected products (1)
VendorProductPlatformVersions
PrivateUploader PrivateUploader — < 3.2.49
Weakness (CWE)
CWESourceDescription
CWE-287 cna CWE-287: Improper Authentication
CVSS scores (1)
ScoreSeverityVersionSourceVector
9.9 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
References (2)
Back to overview