CVE-2023-33995
Last modified
CVE-2023-33995 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Gallery by 10Web: from n/a through 1.8.15.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Gallery by 10Web: from n/a through 1.8.15.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| 10web | Photo Gallery | < 1.8.16 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-33995?
How severe is CVE-2023-33995?
How do I fix CVE-2023-33995?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-3399An issue has been discovered in GitLab EE affecting all vers…7.7
- CVE-2023-33990SAP SQL Anywhere - version 17.0, allows an attacker to preve…7.1
- CVE-2023-33991SAP UI5 Variant Management - versions SAP_UI 750, SAP_UI 754…8.2
- CVE-2023-33992The SAP BW BICS communication layer in SAP Business Warehous…6.5
- CVE-2023-33993B1i module of SAP Business One - version 10.0, application a…7.5
- CVE-2023-33994Missing Authorization vulnerability in VeronaLabs Slimstat A…6.5
- CVE-2023-33996Missing Authorization vulnerability in СleanTalk - Anti-Spam…8.8
- CVE-2023-33997Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
- CVE-2023-33998Missing Authorization vulnerability in cybernetikz Easy Soci…4.3
- CVE-2023-33999Improper neutralization of input during web page generation …7.1
- CVE-2023-34000Unauth. IDOR vulnerability leading to PII Disclosure in WooC…7.5
- CVE-2023-34001Improper Restriction of Excessive Authentication Attempts vu…5.3
Are you affected by CVE-2023-33995?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST