AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-39446

HIGH · CVSS 8.9 EPSS 0.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-09-18 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.9. See the original NVD description below for full technical details.

CVE
CVE-2023-39446
Severity
HIGH
CVSS
8.9
EPSS
0.21%

Original NVD Description

Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the headers that is necessary to create specially designed URLs and originate malicious actions when a legitimate user is logged into the web application.

Related CVEs

Other vulnerabilities affecting the same vendor(s)