CVE-2023-1663

Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthorized actors. The root cause of this vulnerability is an insecurely configured servlet mapping for the underlying Apache Tomcat server. As a result, the downloads directory and its contents are accessible. 5.9 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C)

• CWE-425
• CWE-425

• https://community.synopsys.com/s/article/Mitigation-for-Coverity-Platforms-Exposure-to-CVE-2023-1663Permissions Required
• https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-CVE-2023-1663-Affecting-Coverity-PlatformVendor Advisory
• https://community.synopsys.com/s/article/Mitigation-for-Coverity-Platforms-Exposure-to-CVE-2023-1663Permissions Required
• https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-CVE-2023-1663-Affecting-Coverity-PlatformVendor Advisory

Published

Mar 29, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1654Denial of Service in GitHub repository gpac/gpac prior to 2.…7.8
• CVE-2023-1655Heap-based Buffer Overflow in GitHub repository gpac/gpac pr…7.8
• CVE-2023-1656Cleartext Transmission of Sensitive Information vulnerabilit…7.5
• CVE-2023-1659Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-1660The AI ChatBot WordPress plugin before 4.4.9 does not have a…6.1
• CVE-2023-1661The Display post meta, term meta, comment meta, and user met…5.4
• CVE-2023-1664A flaw was found in Keycloak. This flaw depends on a non-def…6.5
• CVE-2023-1665Improper Restriction of Excessive Authentication Attempts in…9.8
• CVE-2023-1666A vulnerability has been found in SourceCodester Automatic Q…9.8
• CVE-2023-1667A NULL pointer dereference was found In libssh during re-key…6.5
• CVE-2023-1668A flaw was found in openvswitch (OVS). When processing an IP…8.2
• CVE-2023-1669The SEOPress WordPress plugin before 6.5.0.3 unserializes us…7.2