CVE-2023-42328: High severity peppermint vulnerability
An issue in PeppermintLabs Peppermint v.0.2.4 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the hardcoded session cookie.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-42328.
What is the severity of CVE-2023-42328?
The severity of CVE-2023-42328 is high.
What is the affected software?
The affected software is PeppermintLabs Peppermint v.0.2.4 and before.
How can a remote attacker exploit CVE-2023-42328?
A remote attacker can exploit CVE-2023-42328 to obtain sensitive information and execute arbitrary code via the hardcoded session cookie.
Are there any references for CVE-2023-42328?
Yes, here are some references for CVE-2023-42328: - [Link 1](https://blockomat2100.github.io/posts/2023-09-04-damn-vulnerable-ticket-system/) - [Link 2](https://github.com/Peppermint-Lab/peppermint/blob/446a20b870bc68157eaafcb7275c289d76bfb29e/apps/client/pages/api/auth/%5B...nextauth%5D.js#L65) - [Link 3](https://peppermint.sh/)