CVEvulnerability
CVE-2023-48028
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-11-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-307
Description
kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack.
Affected configurations
• kodcloud kodbox 1.46.01
Related
Weakness · CWE (1)
- CWE-307 Improper Restriction of Excessive Authentication Attempts weakness
References
- https://gist.github.com/bugplorer/9ae8ad7a9f2a3053ebd07a1b7b54deae Broken Link
- https://nitipoom-jar.github.io/CVE-2023-48028/ Exploit
- https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48028 nitipoom-jaroonchaipipat.github.io
- https://gist.github.com/bugplorer/9ae8ad7a9f2a3053ebd07a1b7b54deae Broken Link
- https://nitipoom-jar.github.io/CVE-2023-48028/ Exploit