A vulnerability was found in didi KnowSearch 0.3.2/0.3.1.2. It has been rated as problematic. This issue affects some unknown processing of the file /api/es/admin/v3/security/user/1. The manipulation leads to unprotected storage of credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239795.
References
| Link | Resource |
|---|---|
| https://github.com/didi/KnowSearch/files/12135597/ad1aa7b3-ecee-44b0-a22a-80917ca0fe71.pdf4398935202801712312.pdf | Exploit |
| https://github.com/didi/KnowSearch/issues/86 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.239795 | Third Party Advisory |
| https://vuldb.com/?id.239795 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
19 Sep 2023, 15:00
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Didiglobal
Didiglobal knowsearch |
|
| CPE | cpe:2.3:a:didiglobal:knowsearch:0.3.1.2:*:*:*:*:*:*:* cpe:2.3:a:didiglobal:knowsearch:0.3.2:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| References | (MISC) https://github.com/didi/KnowSearch/files/12135597/ad1aa7b3-ecee-44b0-a22a-80917ca0fe71.pdf4398935202801712312.pdf - Exploit | |
| References | (MISC) https://vuldb.com/?ctiid.239795 - Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.239795 - Third Party Advisory | |
| References | (MISC) https://github.com/didi/KnowSearch/issues/86 - Exploit, Issue Tracking |
15 Sep 2023, 16:20
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-15 14:15
Updated : 2024-04-11 01:22
NVD link : CVE-2023-4984
Mitre link : CVE-2023-4984
CVE.ORG link : CVE-2023-4984
JSON object : View
Products Affected
didiglobal
- knowsearch
CWE
CWE-256
Unprotected Storage of Credentials