CVEvulnerability
CVE-2023-4714
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-09-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
A vulnerability was found in PlayTube 3.0.1 and classified as problematic. This issue affects some unknown processing of the component Redirect Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. The identifier VDB-238577 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected configurations
• playtube playtube 3.0.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://packetstormsecurity.com/files/174446/PlayTube-3.0.1-Information-Disclosure.html Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.238577 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.238577 Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/174446/PlayTube-3.0.1-Information-Disclosure.html Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.238577 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.238577 Third Party Advisory, VDB Entry