CVE-2023-1541

Business Logic Errors in answerdev/answer

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.

Affected

answerdev · answerdev/answer

CVSS v3.1 NVD

3.8 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

CVSS v3.0 HUNTR

6.0 MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

EPSS

0.64% chance of exploitation in the next 30 days, 50th percentile

Published

2023-03-21

Updated

2025-02-27

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/8fd891c6-b04e-4dac-818f-9ea30861cd92

Security advisories

• advisories/GHSA-h2wg-83fc-xvm9
• answerdev/answer/commit/15390adbfcd5fd37af4661f992f8873ae5a6b840

References

• CVE Record
• NVD entry