CVE-2023-3091

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This vulnerability affects unknown code in the library CRYPTBASE.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation appears to be difficult. The identifier of this vulnerability is VDB-230668. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published
Jun 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-309105.4HPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP requests.CVE-2023-309117.5HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.CVE-2023-309129.8A remote code execution issue exists in HPE OneView.CVE-2023-309135.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-309145.5In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privilegCVE-2023-309155.5In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privilegCVE-2023-309167.8In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution prCVE-2023-309177.8In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution prCVE-2023-309185.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-309195.5In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-30926.1The SMTP Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.3.4CVE-2023-309205.5In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv
CVE-2023-3091: High severity, CVSS 7.8 | Vulnix