What the vulnerability does
01Description
An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid.
CVSS base score
1.8/10
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N
Key dates
02Disclosure timeline
June 7, 2023
CVE published
January 6, 2025
Record updated
External resources
03References
Related vulnerabilities
