CVE-2023-4714

MEDIUMNuclei

PlayTube Redirect information disclosure

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-4714 has a selected CVSS score of 4.3 (medium); EIP currently links 1 Nuclei template.

Description

A vulnerability was found in PlayTube 3.0.1 and classified as problematic. This issue affects some unknown processing of the component Redirect Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. The identifier VDB-238577 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 11, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

PlayTube

CVE List3.0.1affected

playtube

Browse playtube / playtube

Default status: unknown

CVE List3.0.1affected

Nuclei templates

1
ProjectDiscoveryHIGHPlayTube 3.0.1 - Information DisclosureCVSS 7.5

A vulnerability was found in PlayTube 3.0.1 and classified as problematic. This issue affects some unknown processing of the component Redirect Handler. The manipulation leads to information disclosure. The attack may be initiated remotely.

Impact

An attacker can exploit this vulnerability to gain access to sensitive information.

Remediation

Apply the latest security patches and updates from the vendor to address this vulnerability.

WeaknessesCWE-200
AuthorsFarish
Template tagscve2023cveplaytubeexposurevuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:playtube:playtube:3.0.1:*:*:*:*:*:*:*
https://nvd.nist.gov/vuln/detail/CVE-2023-4714 https://www.exploitalert.com/view-details.html?id=39826 https://vuldb.com/?ctiid.238577 https://vuldb.com/?id.238577 https://github.com/Threekiii/Awesome-POC

Source: ProjectDiscovery

References

4