CVE-2023-39374
published 2023-09-03CVE-2023-39374: ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element
PriorityP432high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.19%
8.6th percentile
ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| forescout | secureconnector | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
matrix-synapse vulnerabilities
osv·2025-04-22·CVSS 5.0
CVE-2023-32683 matrix-synapse vulnerabilities
matrix-synapse vulnerabilities
It was discovered that Synapse network policies could be bypassed via
specially crafted URLs. An attacker could possibly use this issue to
bypass authentication mechanisms. (CVE-2023-32683)
It was discovered that Synapse exposed cached device information. An
attacker could possibly use this issue to gain access to sensitive
information. (CVE-2023-43796)
It was discovered that Synapse could be tricked into rejecting state
changes in rooms. An attacker could possibly use this issue to cause
Synapse to stop functioning properly, resulting in a denial of service.
This issue was only fixed in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
(CVE-2022-39374)
It was discovered that Synapse stored user credentials in a server's
database temporarily. An attacker could possi
GHSA
GHSA-59cx-w742-p2r4: ForeScout NAC SecureConnector version 11
ghsa_unreviewed·2023-09-03
CVE-2023-39374 [HIGH] CWE-427 GHSA-59cx-w742-p2r4: ForeScout NAC SecureConnector version 11
ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-09-03
Published