CVE-2023-46393: High severity gougucms pythagorean oa office system vulnerability
Published Oct 27, 2023
·Updated
gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.
Affected Software
1 affected component
gougucms gougucms=4.08.18
Event History
Oct 27, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2023-46393.
2
What is the severity of CVE-2023-46393?
The severity of CVE-2023-46393 is High with a severity value of 7.5.
3
What is the affected software?
The affected software is Gougucms v4.08.18.
4
What is the impact of this vulnerability?
This vulnerability allows attackers to arbitrarily reset users' passwords via a crafted packet.
5
Is there a fix available for CVE-2023-46393?
At the moment, there is no known fix available. It is recommended to update to a newer version when it becomes available.