CVE-2023-48375

Published: Dec 15, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: twcert@cert.org.tw (Secondary)

Description

SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege, resulting in performing arbitrary system operations or disrupting service.

Affected (1)

Products: Csharp: Cws Collaborative Development Platform

1 product

Cws Collaborative Development Platform

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Csharp Cws Collaborative Development Platform	Version 10.25

Related CWEs

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://www.twcert.org.tw/tw/cp-132-7594-dac20-1.html

Source: twcert@cert.org.tw

Third Party Advisory

https://www.twcert.org.tw/tw/cp-132-7594-dac20-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.