CVE-2023-6023

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 16, 2023
Updated: Nov 28, 2023
CWE ID 29
CWE ID 22

Summary

CVE-2023-6023 is a vulnerability that allows an attacker to read any file on the filesystem on the server hosting ModelDB through a Local File Inclusion (LFI) in the artifact_path URL parameter. This vulnerability has a high base severity rating of 7.5, with a confidentiality impact of HIGH. The exploitability score is 3.9, indicating that it is relatively easy for an attacker to exploit. The affected products include ModelDB, and the potential danger it poses to an organization is significant as it allows unauthorized access to sensitive files on the server. To remediate this vulnerability, it is advised to apply patches or updates provided by the vendor and ensure that proper input validation and sanitization techniques are implemented to prevent LFI attacks.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-6023 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options