critical
9.9
CWE
444
Advisory Published
Updated

CVE-2023-48365

First published: Wed Nov 15 2023(Updated: )

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Qlik Qlik Sense=august_2022
Qlik Qlik Sense=august_2022-patch_1
Qlik Qlik Sense=august_2022-patch_10
Qlik Qlik Sense=august_2022-patch_11
Qlik Qlik Sense=august_2022-patch_12
Qlik Qlik Sense=august_2022-patch_13
Qlik Qlik Sense=august_2022-patch_2
Qlik Qlik Sense=august_2022-patch_3
Qlik Qlik Sense=august_2022-patch_4
Qlik Qlik Sense=august_2022-patch_5
Qlik Qlik Sense=august_2022-patch_6
Qlik Qlik Sense=august_2022-patch_7
Qlik Qlik Sense=august_2022-patch_8
Qlik Qlik Sense=august_2022-patch_9
Qlik Qlik Sense=august_2023
Qlik Qlik Sense=august_2023-patch_1
Qlik Qlik Sense=february_2022
Qlik Qlik Sense=february_2022-patch_1
Qlik Qlik Sense=february_2022-patch_10
Qlik Qlik Sense=february_2022-patch_11
Qlik Qlik Sense=february_2022-patch_12
Qlik Qlik Sense=february_2022-patch_13
Qlik Qlik Sense=february_2022-patch_14
Qlik Qlik Sense=february_2022-patch_2
Qlik Qlik Sense=february_2022-patch_3
Qlik Qlik Sense=february_2022-patch_4
Qlik Qlik Sense=february_2022-patch_5
Qlik Qlik Sense=february_2022-patch_6
Qlik Qlik Sense=february_2022-patch_7
Qlik Qlik Sense=february_2022-patch_8
Qlik Qlik Sense=february_2022-patch_9
Qlik Qlik Sense=february_2023
Qlik Qlik Sense=february_2023-patch_1
Qlik Qlik Sense=february_2023-patch_2
Qlik Qlik Sense=february_2023-patch_3
Qlik Qlik Sense=february_2023-patch_4
Qlik Qlik Sense=february_2023-patch_5
Qlik Qlik Sense=february_2023-patch_6
Qlik Qlik Sense=february_2023-patch_7
Qlik Qlik Sense=february_2023-patch_8
Qlik Qlik Sense=february_2023-patch_9
Qlik Qlik Sense=may_2022
Qlik Qlik Sense=may_2022-patch_1
Qlik Qlik Sense=may_2022-patch_10
Qlik Qlik Sense=may_2022-patch_11
Qlik Qlik Sense=may_2022-patch_12
Qlik Qlik Sense=may_2022-patch_13
Qlik Qlik Sense=may_2022-patch_14
Qlik Qlik Sense=may_2022-patch_15
Qlik Qlik Sense=may_2022-patch_2
Qlik Qlik Sense=may_2022-patch_3
Qlik Qlik Sense=may_2022-patch_4
Qlik Qlik Sense=may_2022-patch_5
Qlik Qlik Sense=may_2022-patch_6
Qlik Qlik Sense=may_2022-patch_7
Qlik Qlik Sense=may_2022-patch_8
Qlik Qlik Sense=may_2022-patch_9
Qlik Qlik Sense=may_2023
Qlik Qlik Sense=may_2023-patch_1
Qlik Qlik Sense=may_2023-patch_2
Qlik Qlik Sense=may_2023-patch_3
Qlik Qlik Sense=may_2023-patch_4
Qlik Qlik Sense=may_2023-patch_5
Qlik Qlik Sense=november_2021
Qlik Qlik Sense=november_2021-patch_1
Qlik Qlik Sense=november_2021-patch_10
Qlik Qlik Sense=november_2021-patch_11
Qlik Qlik Sense=november_2021-patch_12
Qlik Qlik Sense=november_2021-patch_13
Qlik Qlik Sense=november_2021-patch_14
Qlik Qlik Sense=november_2021-patch_15
Qlik Qlik Sense=november_2021-patch_16
Qlik Qlik Sense=november_2021-patch_2
Qlik Qlik Sense=november_2021-patch_3
Qlik Qlik Sense=november_2021-patch_4
Qlik Qlik Sense=november_2021-patch_5
Qlik Qlik Sense=november_2021-patch_6
Qlik Qlik Sense=november_2021-patch_7
Qlik Qlik Sense=november_2021-patch_8
Qlik Qlik Sense=november_2021-patch_9
Qlik Qlik Sense=november_2022
Qlik Qlik Sense=november_2022-patch_1
Qlik Qlik Sense=november_2022-patch_10
Qlik Qlik Sense=november_2022-patch_11
Qlik Qlik Sense=november_2022-patch_2
Qlik Qlik Sense=november_2022-patch_3
Qlik Qlik Sense=november_2022-patch_4
Qlik Qlik Sense=november_2022-patch_5
Qlik Qlik Sense=november_2022-patch_6
Qlik Qlik Sense=november_2022-patch_7
Qlik Qlik Sense=november_2022-patch_8
Qlik Qlik Sense=november_2022-patch_9

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Peer vulnerabilities

(Found alongside the following vulnerabilities)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203