CVE-2023-48865 - An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL

MEDIUM

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL

Published Apr 11, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.56%

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Reportico	Reportico	unknown	Affected n/a

No remediation recorded yet.

Weaknesses (2)

CWE-287

Improper Authentication

CWE-639

Authorization Bypass

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-1272		Advisory
https://gist.github.com/aashiqahamedn/39383cfbc639cbdc3e1a7d74b977aeae		Third Party Advisory
https://github.com/advisories/GHSA-pww3-x2g7-x8q2		Advisory
https://github.com/reportico-web/reportico/issues/51		Exploit
https://nvd.nist.gov/vuln/detail/CVE-2023-48865