CVE Vulnerabilities

CVE-2023-0880

Misinterpretation of Input

Published: Feb 17, 2023 | Modified: Dec 18, 2023

CVSS 3.x

4.3

MEDIUM

Source:

NVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-0880
CWE	https://cwe.mitre.org/data/definitions/115.html

Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Weakness

The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.

Affected Software

Name	Vendor	Start Version	End Version
Phpmyfaq	Phpmyfaq	*	3.1.11 (excluding)

References

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.