CVE-2023-22892

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-668

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://smartbear.com/security/cve/Vendor Advisory
https://smartbear.com/security/cve/Vendor Advisory

Timeline

Published: Mar 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-228937.5Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for au CVE-2023-228944.9Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. Th CVE-2023-228957.5The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem CVE-2023-228976.5An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory co CVE-2023-228986.5workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP CVE-2023-228995.9Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.CVE-2023-22906.7A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to e CVE-2023-229009.8Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to injec CVE-2023-229014.9ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability CVE-2023-229025.4Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker with general user priv CVE-2023-229039.8api/views/user.py in LibrePhotos before e19e539 has incorrect access control.CVE-2023-229068.8Hero Qubo HCD01_02_V1.38_20220125 devices allow TELNET access with root privileges by default, without a password.