CVE-2023-3230 MEDIUM

CVE-2023-3230: Missing Authorization in fossbilling/fossbilling

Vendor Fossbilling
Product fossbilling/fossbilling
Weakness CWE-862 · Missing authorization
Published June 14, 2023
Last update January 2, 2025
View on NVD All CVEs

CVSS base score

4.6/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0.

Key dates

02Disclosure timeline

June 14, 2023 CVE published
January 2, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-31080 WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability CVE-2024-37214 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerability CVE-2023-36509 WordPress CHP Ads Block Detector plugin <= 3.9.5 - Broken Access Control vulnerability CVE-2025-31004 WordPress Rich Table of Contents plugin <= 1.4.0 - Broken Access Control vulnerability CVE-2024-5324 XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update