CVE-2023-46754
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Summary
CVE-2023-46754 is a vulnerability affecting the admin panel of Obl.ong before version 1.1.2. This issue allows bypassing authorization checks, as the email One-Time Password (OTP) feature accepts arbitrary numerical values instead of verifying the authenticity of the code sent to the email address. An unauthorized user who gains access to the admin panel through this vulnerability can manipulate the system and potentially gain unintended access to sensitive information or perform unauthorized actions. This security flaw poses a significant risk for organizations using Obl.ong and emphasizes the importance of keeping software up to date to mitigate such vulnerabilities.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Oblong
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions