CVE-2023-4168
medium · 4.3A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unknown function of the file /ad-list of the component Redirect Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-236184. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
4.3
CVSS
46.0%
EPSS (exploit prob.)
99th
EPSS percentile
2023-08-05
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| templatecookie | adlisting | 2.14.0 |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/174015/Adlisting-Classified-Ads-2.14.0-Information-Disclosure.html
- https://vuldb.com/?ctiid.236184
- https://vuldb.com/?id.236184
- http://packetstormsecurity.com/files/174015/Adlisting-Classified-Ads-2.14.0-Information-Disclosure.html
- https://vuldb.com/?ctiid.236184
- https://vuldb.com/?id.236184
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-4168