CVE-2023-2902

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in NFine Rapid Development Platform 20230511. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /SystemManage/Organize/GetTreeGridJson?_search=false&nd=1681813520783&rows=10000&page=1&sidx=&sord=asc. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229976. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
May 25, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-290206.5@fastify/passport is a port of passport authentication library for the Fastify ecosystem. The CSRF (Cross-Site Request Forger) protection enCVE-2023-290225.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciouCVE-2023-290236.1A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious CVE-2023-290246.5A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scripting vulnerability waCVE-2023-290255.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciouCVE-2023-290265.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciouCVE-2023-290275.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciouCVE-2023-290285.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciouCVE-2023-290295.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciouCVE-2023-29036.5A vulnerability classified as problematic has been found in NFine Rapid Development Platform 20230511. This affects an unknown part of the fCVE-2023-290307.1A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious CVE-2023-290317.1A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious
CVE-2023-2902: Medium severity, CVSS 6.5 | Vulnix