CVE-2023-38752

—

CVSS 3.1

4.3 medium

EPSS

<1%p38

Published

Aug 9, 2023 (Aug 9, 2023)

Modified

Jun 17, 2026

Description

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings.

Vendors: jpcert
Products: special interest group network for analysis and liaison
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.