What is CVE-2023-48375?

CVE-2023-48375 is a high-severity vulnerability in Csharp Cws Collaborative Development Platform, classified under Missing Authorization. CVSS score: 8.8/10. Published 2023-12-15.

How severe is CVE-2023-48375?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Csharp Cws Collaborative Development Platform

CVE-2023-48375

SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege, resulting in performing arbitrary system operations or disrupting service.

Vulnerability class: Broken Access Control

EPSS: 0.007 (49.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Csharp Cws_collaborative_development_platform — versions 10.25
Smartstar Software Cws Web-base — versions v10.25

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

twcert@cert.org.tw (Third Party Advisory)

Frequently asked questions

What is CVE-2023-48375?: CVE-2023-48375 is a high-severity vulnerability in Csharp Cws Collaborative Development Platform, classified under Missing Authorization. CVSS score: 8.8/10. Published 2023-12-15.
How severe is CVE-2023-48375?: High severity. CVSS v3 base score is 8.8 out of 10.