CVE-2023-5916

MOYENNE 4.3CVE-2023-5916 · Published 02/11/2023 · updated 17/06/2026

En bref

CVE-2023-5916 est une vulnérabilité MOYENNE (CVSS 4.3) touchant dashy (dashy).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.61%, plus élevée que 49.4% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
dashy dashy	`= 2.1.1`	No fix yet

Description

A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /config-manager/save of the component Configuration Handler. The manipulation of the argument config leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-244305 was assigned to this vulnerability.

References

Lissy93/dashy · Exploit
treasure-blarney-085.notion.site/Dashy-0dca8a0ebbd84f78ae6d03528ff1538c · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free