CVE-2023-7193 MEDIUM

CVE-2023-7193: MTab Bookmark Installation install.php access control

Vendor Mtab
Product Bookmark
Weakness CWE-284
Published December 31, 2023
Last update November 20, 2024
View on NVD All CVEs

CVSS base score

4.6/10
Attack vector Adjacent
Attack complexity High
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability was found in MTab Bookmark up to 1.2.6 and classified as critical. This issue affects some unknown processing of the file public/install.php of the component Installation. The manipulation leads to improper access controls. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249395. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Key dates

02Disclosure timeline

December 31, 2023 CVE published
November 20, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-0232 Paragon Active Assurance: Authentication bypass vulnerability in Control Center CVE-2024-39772 Silent Desktop Screenshot Capture CVE-2025-20335 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Arbitrary File Write Vulnerability CVE-2024-1376 Event post <= 5.9.4 - Missing Authorization CVE-2023-25161 Nextcloud Server's missing rate limiting on password reset functionality allows sending lots of emails