EUVD-2023-55519

| CVE-2023-50786 MEDIUM
2025-07-05 [email protected]
4.1
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

3
EUVD ID Assigned
Mar 16, 2026 - 03:19 euvd
EUVD-2023-55519
Analysis Generated
Mar 16, 2026 - 03:19 vuln.today
CVE Published
Jul 05, 2025 - 04:15 nvd
MEDIUM 4.1

Tags

Microsoft Information Disclosure Dradis Windows

Description

Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded (uploaded) images. This can be leveraged by an authorized author to attempt to steal the Net-NTLM hashes of other authors on a Windows domain network.

Analysis

A remote code execution vulnerability in Dradis through 4.16.0 (CVSS 4.1). Remediation should follow standard vulnerability management procedures.

Technical Context

Vulnerability type: remote code execution. Affects Dradis through 4.16.0.

Affected Products

['Dradis through 4.16.0']

Remediation

Monitor vendor channels for patch availability.

Priority Score

21
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +20
POC: 0

Share

EUVD-2023-55519 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy