CVE-2023-2848

High

Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header…

snyk·CWE-1385·Published 2023-09-14

CVSS

8.8

EPSS

0.00

KEV

Exploits

cve.orgen

142 chars

Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header validation.

NVDen

142 chars

Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header validation.

Movim anterior a la versión 0.22 se ve afectado por una vulnerabilidad de Cross-Site WebSocket Hijacking. Este fue el resultado de una validación de encabezado faltante.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	8.0	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
3.1	Primary	cve.org	8.0	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
3.1	Secondary	NVD	8.0	1.6	5.8	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N