CVE-2023-50872
Last modified
CVE-2023-50872 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses partial information about certificates and their respective holder. NOTE: the excellium-services.com web page about this issue mentions "Vendor says that it's not a security issue.". EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses partial information about certificates and their respective holder. NOTE: the excellium-services.com web page about this issue mentions "Vendor says that it's not a security issue."
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2023-50872?
How severe is CVE-2023-50872?
How do I fix CVE-2023-50872?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-50866Travel Website v1.0 is vulnerable to multiple Unauthenticate…9.8
- CVE-2023-50867Travel Website v1.0 is vulnerable to multiple Unauthenticate…9.8
- CVE-2023-50868The Closest Encloser Proof aspect of the DNS protocol (in RF…7.5
- CVE-2023-5087The Page Builder: Pagelayer WordPress plugin before 1.7.8 do…5.4
- CVE-2023-50870In JetBrains TeamCity before 2023.11.1 a CSRF on login was p…8.8
- CVE-2023-50871In JetBrains YouTrack before 2023.3.22268 authorization chec…4.3
- CVE-2023-50873Cross-Site Request Forgery (CSRF) vulnerability in Marios Al…8.8
- CVE-2023-50874Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2023-50875Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2023-50876Missing Authorization vulnerability in Molongui Molongui all…4.3
- CVE-2023-50877Missing Authorization vulnerability in woobewoo Product Filt…4.3
- CVE-2023-50878Cross-Site Request Forgery (CSRF) vulnerability in InspireUI…8.8
Are you affected by CVE-2023-50872?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST