How severe is CVE-2023-38752?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Japan Computer Emergency Response Team Coordination Center (Jpcert/cc) Special Interest Group Network For Analysis And Liaison

CVE-2023-38752

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings.

EPSS: 0.004 (30.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Japan Computer Emergency Response Team Coordination Center (Jpcert/cc) Special Interest Group Network For Analysis And Liaison — versions versions 4.4.0 to 4.7.7
Jpcert Special_interest_group_network_for_analysis_and_liaison

References

vultures@jpcert.or.jp (Third Party Advisory)
vultures@jpcert.or.jp (Third Party Advisory)

Frequently asked questions

What is CVE-2023-38752?: CVE-2023-38752 is a medium-severity vulnerability in Japan Computer Emergency Response Team Coordination Center (Jpcert/cc) Special Interest Group Network For Analysis And Liaison. CVSS score: 4.3/10. Published 2023-08-09.
How severe is CVE-2023-38752?: Medium severity. CVSS v3 base score is 4.3 out of 10.