CVE-2023-43317

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Jan 24, 2024
Updated: Jan 30, 2024

Summary

CVE-2023-43317 is a cyber vulnerability that affects Coign CRM Portal v.06.06. It allows a remote attacker to escalate privileges through the userPermissionsList parameter in the Session Storage component. The vulnerability has a base severity of HIGH and a base score of 8.8 according to NIST. The exploitability score is 2.8, indicating it is relatively easy to exploit. The impact includes high integrity and confidentiality impacts, posing a significant danger to organizations using the affected product. The attack vector is through the network, and user interaction is not required. To remediate this vulnerability, organizations should apply any available patches or updates provided by the software vendor as soon as possible to mitigate the risk of privilege escalation attacks.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-43317 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options