What is the CVSS score of CVE-2023-41363?

CVE-2023-41363 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2023-41363?

Yes, a patch is available for CVE-2023-41363. Update the affected software to the latest version immediately.

Cerebrate CVE-2023-41363

MEDIUM

2023-08-29 cve@mitre.org

Information Disclosure Cerebrate

4.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Aug 29, 2023 - 05:15 nvd

MEDIUM 4.3

DescriptionNVD

In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.

AnalysisAI

In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users. Affected products include: Cerebrate-Project Cerebrate.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Cerebrate

View all

CVE-2022-25321 MEDIUM This Month POC

6.1 Feb 18

An issue was discovered in Cerebrate through 1.4. Rated medium severity (CVSS 6.1), this vulnerability is remotely explo

CVE-2023-28883 CRITICAL Act Now

9.8 Mar 27

In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint. Rated critical severity (CVSS 9.8), this

CVE-2022-25319 MEDIUM This Month POC

5.3 Feb 18

An issue was discovered in Cerebrate through 1.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely explo

CVE-2023-26468 CRITICAL Act Now

9.1 Feb 24

Cerebrate 1.12 does not properly consider organisation_id during creation of API keys. Rated critical severity (CVSS 9.1

CVE-2026-53901 HIGH This Week

8.7 Jun 11

Mass-assignment in Cerebrate before v1.37 lets remote attackers reaching a generic CRUD add endpoint supply a client-con

CVE-2026-53911 MEDIUM This Month

6.3 Jun 11

Unauthorized record modification in Cerebrate before 1.37 allows any authenticated user to overwrite arbitrary records o

CVE-2022-25317 MEDIUM This Month

6.1 Feb 18

An issue was discovered in Cerebrate through 1.4. Rated medium severity (CVSS 6.1), this vulnerability is remotely explo

CVE-2023-41908 MEDIUM This Month

5.3 Sep 05

Cerebrate before 1.15 lacks the Secure attribute for the session cookie. Rated medium severity (CVSS 5.3), this vulnerab

CVE-2022-25320 MEDIUM This Month

5.3 Feb 18

An issue was discovered in Cerebrate through 1.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely explo

CVE-2026-53912 MEDIUM This Month

5.1 Jun 11

Cerebrate's inbox self-registration workflow exposed bcrypt password hashes of pending registrants to any authenticated

CVE-2022-25318 MEDIUM This Month

4.3 Feb 18

An issue was discovered in Cerebrate through 1.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely explo

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2023-41363 vulnerability details – vuln.today

Back

Cerebrate CVE-2023-41363

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Cerebrate

Same technique Information Disclosure

Share

External POC / Exploit Code