CVE-2023-38195

Published: Jul 22, 2023Modified: Nov 21, 2024

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external (SQL Server or PostgreSQL) metadata storage is used. Exploitation can only occur from a high-privileged user account.

Affected (1)

Products: Datalust: Seq

Datalust

1 product

Seq

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Datalust Seq	Before 2023.2.9489

References (2)

https://github.com/datalust/seq-tickets/issues/1886

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://github.com/datalust/seq-tickets/issues/1886

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.