CVE-2023-22958

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p38

Published

Jan 11, 2023 (Jan 11, 2023)

Modified

Jun 17, 2026

Description

The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target parameter.

Vendors: syracom
Products: secure login
Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.