An issue in LTB Self Service Password before v.1.5.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via hijack of the SMS verification code function to arbitrary phone.
References
| Link | Resource |
|---|---|
| https://github.com/ltb-project/self-service-password/issues/816 | Issue Tracking |
| https://github.com/piuppi/Proof-of-Concepts/blob/main/ltb-project/README.md | Third Party Advisory |
Configurations
History
02 Jan 2024, 16:31
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ltb-project self Service Password
Ltb-project |
|
| CPE | cpe:2.3:a:ltb-project:self_service_password:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | () https://github.com/ltb-project/self-service-password/issues/816 - Issue Tracking | |
| References | () https://github.com/piuppi/Proof-of-Concepts/blob/main/ltb-project/README.md - Third Party Advisory |
21 Dec 2023, 02:24
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-21 00:15
Updated : 2024-02-28 20:54
NVD link : CVE-2023-49032
Mitre link : CVE-2023-49032
CVE.ORG link : CVE-2023-49032
JSON object : View
Products Affected
ltb-project
- self_service_password
CWE