CVE-2023-5321

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-5321", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "state": "PUBLISHED", "assignerShortName": "@huntrdev", "dateReserved": "2023-09-30T13:43:01.219Z", "datePublished": "2023-09-30T13:43:14.012Z", "dateUpdated": "2024-09-23T15:59:12.649Z"}, "containers": {"cna": {"title": "Missing Authorization in hamza417/inure", "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntrdev", "dateUpdated": "2023-09-30T13:43:14.012Z"}, "descriptions": [{"lang": "en", "value": "Missing Authorization in GitHub repository hamza417/inure prior to build94."}], "affected": [{"vendor": "hamza417", "product": "hamza417/inure", "versions": [{"version": "unspecified", "lessThan": "build94", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://huntr.dev/bounties/b1becc68-e738-458f-bd99-06ee77580d3a"}, {"url": "https://github.com/hamza417/inure/commit/57fda918bfd2fb863f579841a46363fe8e10c29b"}], "metrics": [{"cvssV3_0": {"version": "3.0", "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 5.1, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862"}]}], "source": {"advisory": "b1becc68-e738-458f-bd99-06ee77580d3a", "discovery": "EXTERNAL"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T07:52:08.587Z"}, "title": "CVE Program Container", "references": [{"url": "https://huntr.dev/bounties/b1becc68-e738-458f-bd99-06ee77580d3a", "tags": ["x_transferred"]}, {"url": "https://github.com/hamza417/inure/commit/57fda918bfd2fb863f579841a46363fe8e10c29b", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-23T15:58:24.704049Z", "id": "CVE-2023-5321", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-23T15:59:12.649Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://huntr.dev/bounties/b1becc68-e738-458f-bd99-06ee77580d3a", "tags": ["x_transferred"]}, {"url": "https://github.com/hamza417/inure/commit/57fda918bfd2fb863f579841a46363fe8e10c29b", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T07:52:08.587Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-5321", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-23T15:58:24.704049Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-23T15:59:05.433Z"}}], "cna": {"title": "Missing Authorization in hamza417/inure", "source": {"advisory": "b1becc68-e738-458f-bd99-06ee77580d3a", "discovery": "EXTERNAL"}, "metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "hamza417", "product": "hamza417/inure", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "build94", "versionType": "custom"}]}], "references": [{"url": "https://huntr.dev/bounties/b1becc68-e738-458f-bd99-06ee77580d3a"}, {"url": "https://github.com/hamza417/inure/commit/57fda918bfd2fb863f579841a46363fe8e10c29b"}], "descriptions": [{"lang": "en", "value": "Missing Authorization in GitHub repository hamza417/inure prior to build94."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntrdev", "dateUpdated": "2023-09-30T13:43:14.012Z"}}}, "cveMetadata": {"cveId": "CVE-2023-5321", "state": "PUBLISHED", "dateUpdated": "2024-09-23T15:59:12.649Z", "dateReserved": "2023-09-30T13:43:01.219Z", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "datePublished": "2023-09-30T13:43:14.012Z", "assignerShortName": "@huntrdev"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "hamza417/inure", "vendor": "hamza417", "versions": [{"lessThan": "build94", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "source": "security@huntr.dev"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hamza417:inure:build44:*:*:*:*:android:*:*", "matchCriteriaId": "87394290-8249-483E-A8A0-2FBCF75A1051", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build45:*:*:*:*:android:*:*", "matchCriteriaId": "2A843F84-D761-487B-A93E-B8E76AA8E365", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build46:*:*:*:*:android:*:*", "matchCriteriaId": "A091386E-FEA7-4B3A-810B-466F2BABC352", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build47:*:*:*:*:android:*:*", "matchCriteriaId": "3037260D-E131-4EDE-9189-B1FB0A5A5429", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build48:*:*:*:*:android:*:*", "matchCriteriaId": "3C15666B-5CD6-49F9-BD6E-1F89C55E1E5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build49:*:*:*:*:android:*:*", "matchCriteriaId": "94983588-9C53-46DD-B7F2-E48967B55DEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build51:*:*:*:*:android:*:*", "matchCriteriaId": "FE23796A-FD93-475A-828E-BD42F7C27851", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build52:*:*:*:*:android:*:*", "matchCriteriaId": "5D5B20EF-6DB4-46A2-9FB9-03A5773632B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build53:*:*:*:*:android:*:*", "matchCriteriaId": "6B969370-88D9-4059-B91B-BF9BC1621DF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build55:*:*:*:*:android:*:*", "matchCriteriaId": "7E9567E1-7561-4E13-91F0-DF34E30C8259", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build56:*:*:*:*:android:*:*", "matchCriteriaId": "EC5D4C76-982F-48CF-A82E-6CCDC8925115", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build57:*:*:*:*:android:*:*", "matchCriteriaId": "611070EE-763F-459F-8B9D-89C55997D8F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build58:*:*:*:*:android:*:*", "matchCriteriaId": "6B638451-2C56-48F8-903E-D2FCFB0645D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build59:*:*:*:*:android:*:*", "matchCriteriaId": "97DADF5F-0278-492D-8B1E-48CA370669A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build60:*:*:*:*:android:*:*", "matchCriteriaId": "5D1D5563-CD34-4E56-B8B5-8587E5E9F35F", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build61:*:*:*:*:android:*:*", "matchCriteriaId": "2E747A57-6A29-4185-9312-FBE54E867F44", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build62:*:*:*:*:android:*:*", "matchCriteriaId": "831150BC-FAF5-4F72-B344-10988D9CABCB", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build63:*:*:*:*:android:*:*", "matchCriteriaId": "EA698C87-4CCD-4857-A85C-D09741D8D38C", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build64:*:*:*:*:android:*:*", "matchCriteriaId": "B8C7AAE5-4EAA-475E-AB89-1F29C8FB4B64", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build65:*:*:*:*:android:*:*", "matchCriteriaId": "9D51C065-4487-4802-9BD9-10ED0387DF0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build66:*:*:*:*:android:*:*", "matchCriteriaId": "C8BEFFEB-CAE5-499B-B815-1CD205F39434", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build67:*:*:*:*:android:*:*", "matchCriteriaId": "2CF8D831-DF7C-446E-93F8-3D5AE164A427", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build68:*:*:*:*:android:*:*", "matchCriteriaId": "F26BFF90-A51B-4027-9143-4B61B12A1CCC", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build69:*:*:*:*:android:*:*", "matchCriteriaId": "83A39BFC-4974-4213-8E4A-DBFCFB61B4DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build70:*:*:*:*:android:*:*", "matchCriteriaId": "28379D90-2075-41EC-BB8F-55C71C79FE30", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build71:*:*:*:*:android:*:*", "matchCriteriaId": "4D89556A-C668-4AAF-B914-F9E73AEA7C54", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build72:*:*:*:*:android:*:*", "matchCriteriaId": "60FB0F45-8232-4B63-9A89-E416E1C46132", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build73:*:*:*:*:android:*:*", "matchCriteriaId": "476FAE2E-BA3D-4431-B66C-59BEF5FAE401", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build74:*:*:*:*:android:*:*", "matchCriteriaId": "2F2DD2A7-FA45-48F5-816E-BEEF1ED98180", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build75:*:*:*:*:android:*:*", "matchCriteriaId": "9F91A3B6-44E8-4D4E-B39B-1A24955D52B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build76:*:*:*:*:android:*:*", "matchCriteriaId": "327CF0CC-7D07-4FE8-844F-DC4A67339FCE", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build77:*:*:*:*:android:*:*", "matchCriteriaId": "954BF3FA-22BF-4789-A8D3-D4CE046A0309", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build78:*:*:*:*:android:*:*", "matchCriteriaId": "09C5A9B4-860C-482B-95A8-D9E2384E090E", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build79:*:*:*:*:android:*:*", "matchCriteriaId": "CFBAB653-08B9-44A1-B918-EE1E2518C09C", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build80:*:*:*:*:android:*:*", "matchCriteriaId": "AA445E51-8A00-4298-BE11-A6C1EF5A3B69", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build83:*:*:*:*:android:*:*", "matchCriteriaId": "499604F5-2385-4444-B47A-C88BEF3DE04F", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build85:*:*:*:*:android:*:*", "matchCriteriaId": "E465B1F6-B513-49C6-ADB2-C7969EBB8B30", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build86:*:*:*:*:android:*:*", "matchCriteriaId": "6C6937BF-2A9A-43CC-B281-72C5C5D61B1A", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build87:*:*:*:*:android:*:*", "matchCriteriaId": "E5DB21B5-7B52-433E-B18B-E24B56DFF2F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build88:*:*:*:*:android:*:*", "matchCriteriaId": "EC172BAC-6564-4E9F-80E1-CC8B91052944", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build89:*:*:*:*:android:*:*", "matchCriteriaId": "FE10EAA2-6C78-461A-8080-C7C4795195CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build92:*:*:*:*:android:*:*", "matchCriteriaId": "0C973B0B-F663-4144-921C-D31A637A36D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:hamza417:inure:build93:*:*:*:*:android:*:*", "matchCriteriaId": "126E9031-87AA-4776-A366-80DCE9A51978", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Missing Authorization in GitHub repository hamza417/inure prior to build94."}, {"lang": "es", "value": "Falta autorizaci\u00f3n en el repositorio de GitHub hamza417/inure antes de build94."}], "id": "CVE-2023-5321", "lastModified": "2026-06-17T06:48:20.290", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.5, "impactScore": 2.5, "source": "security@huntr.dev", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-5321", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-09-23T15:58:24.704049Z", "version": "2.0.3"}}]}, "published": "2023-09-30T14:15:15.843", "references": [{"source": "security@huntr.dev", "tags": ["Patch"], "url": "https://github.com/hamza417/inure/commit/57fda918bfd2fb863f579841a46363fe8e10c29b"}, {"source": "security@huntr.dev", "tags": ["Exploit"], "url": "https://huntr.dev/bounties/b1becc68-e738-458f-bd99-06ee77580d3a"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/hamza417/inure/commit/57fda918bfd2fb863f579841a46363fe8e10c29b"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "https://huntr.dev/bounties/b1becc68-e738-458f-bd99-06ee77580d3a"}], "sourceIdentifier": "security@huntr.dev", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@huntr.dev", "type": "Secondary"}]}

{}

{}