What is CVE-2023-32182?

CVE-2023-32182 is a medium-severity vulnerability in Opensuse Leap, classified under Improper Link Resolution Before File Access. CVSS score: 5.9/10. Published 2023-09-19.

How severe is CVE-2023-32182?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Opensuse Leap

CVE-2023-32182

A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This…

EPSS: 0.003 (20.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Opensuse Leap — versions 15.5
Suse Linux_enterprise_high_performance_computing — versions 15.0
Suse Opensuse Leap 15.5 — versions ?
Suse Suse_linux_enterprise_desktop — versions 15
Suse Linux Enterprise Desktop 15 Sp5 — versions ?
Suse Linux Enterprise High Performance Computing 15 Sp5 — versions ?

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

meissner@suse.de (Exploit, Issue Tracking)

Frequently asked questions

What is CVE-2023-32182?: CVE-2023-32182 is a medium-severity vulnerability in Opensuse Leap, classified under Improper Link Resolution Before File Access. CVSS score: 5.9/10. Published 2023-09-19.
How severe is CVE-2023-32182?: Medium severity. CVSS v3 base score is 5.9 out of 10.