CVE-2023-23986

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Dec 9, 2024
CWE ID 862

Summary

CVE-2023-23986 is a security vulnerability affecting the Noah Hearle, Design Extreme Reviews and Rating application integrated with Google My Business. The flaw involves missing authorization checks, enabling unauthorized access to incorrectly configured security levels. This issue can be exploited to manipulate reviews and ratings for businesses from n/a to 4.14, potentially leading to misrepresentation and reputational harm.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share