CVEvulnerability

CVE-2023-2260

8.8 HIGH Published 2023-04-24 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2023-04-24
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected]): 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-639

Description

Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.

Affected configurations

• alf alf (< 2.0-m4-2304)

Related

Weakness · CWE (1)

CWE-639 Authorization Bypass Through User-Controlled Key weakness

References