CVE-2023-3029

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. This vulnerability affects unknown code of the file /note/index/delete. The manipulation of the argument id leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230458 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
Guangdong	Pythagorean OA Office System	4.50.0; 4.50.1; 4.50.2; 4.50.3; 4.50.4; 4.50.5; 4.50.6; 4.50.7; 4.50.8; 4.50.9; 4.50.10; 4.50.11; 4.50.12; 4.50.13; 4.50.14; 4.50.15; 4.50.16; 4.50.17; 4.50.18; 4.50.19

References

https://gitee.com/gouguopen/office/issues/I74VRGExploit, Third Party Advisory
https://vuldb.com/?ctiid.230458Permissions Required
https://vuldb.com/?id.230458Third Party Advisory
https://gitee.com/gouguopen/office/issues/I74VRGExploit, Third Party Advisory
https://vuldb.com/?ctiid.230458Permissions Required
https://vuldb.com/?id.230458Third Party Advisory

Timeline

Published: Jun 1, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-302977.0An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring fu CVE-2023-303005.5An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.CVE-2023-303057.5An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of service.CVE-2023-303064.3An issue discovered in Mercury x30g, Mercury YR1800XG routers allows attackers to hijack TCP sessions which could lead to a denial of servic CVE-2023-303075.3An issue discovered in TP-LINK TL-R473GP-AC, TP-LINK XDR6020, TP-LINK TL-R479GP-AC, TP-LINK TL-R4239G, TP-LINK TL-WAR1200L, and TP-LINK TL-R CVE-2023-303086.5An issue discovered in Ruijie EG210G-P, Ruijie EG105G-V2, Ruijie NBR, and Ruijie EG105G routers allows attackers to hijack TCP sessions whic CVE-2023-303095.7An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service.CVE-2023-30314.9Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing th CVE-2023-303107.5An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service.CVE-2023-303117.5An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of ser CVE-2023-303127.3An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to CVE-2023-303137.5An issue discovered in Wavlink QUANTUM D2G routers allows attackers to hijack TCP sessions which could lead to a denial of service.