CVE-2023-37865
Last modified
CVE-2023-37865 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1.. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ip2location | Country Blocker | < 2.29.2 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-37865?
How severe is CVE-2023-37865?
How do I fix CVE-2023-37865?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-3786A vulnerability classified as problematic has been found in …6.8
- CVE-2023-37860In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…7.5
- CVE-2023-37861In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…8.8
- CVE-2023-37862In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…8.2
- CVE-2023-37863In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…7.2
- CVE-2023-37864In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…7.2
- CVE-2023-37866Improper Privilege Management vulnerability in Crocoblock Je…7.2
- CVE-2023-37867Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabil…8.1
- CVE-2023-37868Exposure of Sensitive Information to an Unauthorized Actor v…6.5
- CVE-2023-37869Missing Authorization vulnerability in Premium Addons Premiu…8.8
- CVE-2023-3787A vulnerability classified as problematic was found in Codec…5.4
- CVE-2023-37870Missing Authorization vulnerability in Woo WooCommerce Warra…8.1
Are you affected by CVE-2023-37865?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST