CVE-2023-46754

—

CVSS 3.1

5.3 medium

EPSS

<1%p32

Published

Oct 26, 2023 (Oct 26, 2023)

Modified

Jun 17, 2026

Description

The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.

Vendors: obl.ong
Products: admin
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.