Vulnerability Details CVE-2023-41261
An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV does not require authentication and allows an unauthenticated user to export a report and access the results.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.2%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2023-41261
-
cpe:2.3:a:plixer:scrutinizer:17.11
-
cpe:2.3:a:plixer:scrutinizer:18.12.14
-
cpe:2.3:a:plixer:scrutinizer:18.14
-
cpe:2.3:a:plixer:scrutinizer:18.16
-
cpe:2.3:a:plixer:scrutinizer:18.18
-
cpe:2.3:a:plixer:scrutinizer:18.20
-
cpe:2.3:a:plixer:scrutinizer:18.6
-
cpe:2.3:a:plixer:scrutinizer:18.7
-
cpe:2.3:a:plixer:scrutinizer:18.9
-
cpe:2.3:a:plixer:scrutinizer:19.0.0
-
cpe:2.3:a:plixer:scrutinizer:19.0.1
-
cpe:2.3:a:plixer:scrutinizer:19.0.2
-
cpe:2.3:a:plixer:scrutinizer:19.1.0
-
cpe:2.3:a:plixer:scrutinizer:19.1.1
-
cpe:2.3:a:plixer:scrutinizer:19.2.0
-
cpe:2.3:a:plixer:scrutinizer:19.2.2
-
cpe:2.3:a:plixer:scrutinizer:19.3.0