CVE Vulnerabilities

CVE-2023-28876

Published: Dec 06, 2023 | Modified: Dec 11, 2023

CVSS 3.x

4.3

MEDIUM

Source:

NVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-28876
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to delete comments on files uploaded by other users.

Affected Software

Name	Vendor	Start Version	End Version
Filerun	Afian	*	2022.02.02 (including)

References

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.