CVE-2023-6144

PoC —

CVSS 3.1

4.8 medium

EPSS

<1%p38

Published

Nov 21, 2023 (Nov 21, 2023)

Modified

Jun 17, 2026

Description

Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any user's session just by knowing their username.

Vendors: armanidrisi
Products: dev blog
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.