How severe is CVE-2023-4320?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.5 out of 10.

What type of vulnerability is CVE-2023-4320?

This is classified as CWE-613, which is a common weakness in software security.

CVE-2023-4320

HIGH Year: 2023

CVSS v3 Score

7.5

High

Weakness Type

CWE-613

View all →

Vulnerability Description

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity.

CVE-2016-11058

HIGH

CVSS:7.5(High)

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs.

CWE-6132016

CVE-2016-20007

HIGH

CVSS:7.5(High)

The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.

CWE-6132016

CVE-2017-12159

HIGH

CVSS:7.5(High)

It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session, leading to possible i...

CWE-6132017