CVE-2023-3091
Last modified
CVE-2023-3091 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This vulnerability affects unknown code in the library CRYPTBASE.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation appears to be difficult. The identifier of this vulnerability is VDB-230668. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Captura Project | Captura | <= 8.0.0 |
References
- https://vuldb.com/?ctiid.230668Permissions Required, Third Party Advisory
- https://vuldb.com/?id.230668Permissions Required, Third Party Advisory
- https://vuldb.com/?ctiid.230668Permissions Required, Third Party Advisory
- https://vuldb.com/?id.230668Permissions Required, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-3091?
How severe is CVE-2023-3091?
How do I fix CVE-2023-3091?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-30903HP-UX could be exploited locally to create a Denial of Servi…5.5
- CVE-2023-30904A security vulnerability in HPE Insight Remote Support may r…5.5
- CVE-2023-30905The MC990 X and UV300 RMC component has and inadequate defau…7.8
- CVE-2023-30906The vulnerability could be locally exploited to allow escala…7.8
- CVE-2023-30908A remote authentication bypass issue exists in a OneView API…9.8
- CVE-2023-30909A remote authentication bypass issue exists in some OneView …9.8
- CVE-2023-30910HPE MSA Controller prior to version IN210R004 could be remot…5.4
- CVE-2023-30911HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 usi…7.5
- CVE-2023-30912 A remote code execution issue exists in HPE OneView. 9.8
- CVE-2023-30913In telephony service, there is a missing permission check. T…5.5
- CVE-2023-30914In email service, there is a missing permission check. This …5.5
- CVE-2023-30915In email service, there is a missing permission check. This …5.5
Are you affected by CVE-2023-3091?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
