CVE-2023-2900

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in NFine Rapid Development Platform 20230511. It has been classified as problematic. Affected is an unknown function of the file /Login/CheckLogin. The manipulation leads to use of weak hash. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-229974 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-328 CWE-327

Affected software

No affected versions have been published.

Timeline

Published: May 25, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-290006.5The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.7.0, b CVE-2023-290017.5Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes source routing head CVE-2023-290026.3Cilium is a networking, observability, and security solution with an eBPF-based dataplane. When run in debug mode, Cilium will log the conte CVE-2023-290038.8SvelteKit is a web development framework. The SvelteKit framework offers developers an option to create simple REST APIs. This is done by de CVE-2023-290046.5hap-wi/roxy-wi is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A Path Traversal vulnerability was found in th CVE-2023-290057.5Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials. Version 4.3.0 include CVE-2023-290068.8The Order GLPI plugin allows users to manage order management within GLPI. Starting with version 1.8.0 and prior to versions 2.7.7 and 2.10.CVE-2023-290077.8Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40 CVE-2023-290088.8The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containing end CVE-2023-290096.1baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to CVE-2023-29016.5A vulnerability was found in NFine Rapid Development Platform 20230511. It has been declared as problematic. Affected by this vulnerability CVE-2023-290106.5Budibase is a low code platform for creating internal tools, workflows, and admin panels. Versions prior to 2.4.3 (07 March 2023) are vulner