CVE-2023-2902
MEDIUMNFine Rapid Development Platform 20230511 - Unauthenticated Improper Access Control in Organize/GetTreeGridJson Endpoint
Title source: llmDescription
A vulnerability was found in NFine Rapid Development Platform 20230511. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /SystemManage/Organize/GetTreeGridJson?_search=false&nd=1681813520783&rows=10000&page=1&sidx=&sord=asc. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229976. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References (3)
Core 3
Core References
Permissions Required vdb-entry
https://vuldb.com/?id.229976
Permissions Required signature
permissions-required
https://vuldb.com/?ctiid.229976
Scores
CVSS v3
4.3
EPSS
0.0068
EPSS Percentile
47.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-284
Status
published
Products (1)
nfine_rapid_development_platform_project/nfine_rapid_development_platform
2023-05-11
Published
May 25, 2023
Tracked Since
Feb 18, 2026