CVE-2023-2848: High severity movim vulnerability
Published Sep 14, 2023
·Updated
Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header validation.
Affected Software
1 affected component
Movim Movim<0.22
Remediation
Event History
Sep 14, 2023
CVE Published
via MITRE·11:36 AM
Data Sourced
via MITRE·11:36 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2023-2848.
2
What is the severity level of CVE-2023-2848?
CVE-2023-2848 has a severity level of high.
3
What is the affected software version of CVE-2023-2848?
Movim prior to version 0.22 is affected by CVE-2023-2848.
4
What is the impact of CVE-2023-2848?
CVE-2023-2848 allows for Cross-Site WebSocket Hijacking, potentially leading to unauthorized access and data exposure.
5
How can I mitigate the vulnerability in Movim version 0.22?
To mitigate the vulnerability in Movim version 0.22, update to a version that includes the fixes mentioned in the references provided.