CVE-2023-3096

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vulnerability affects the function changedSource. The manipulation leads to improper access controls. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.1-130 is able to address this issue. It is recommended to upgrade the affected component. VDB-230686 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jun 5, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-309604.3A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not hav CVE-2023-309616.1Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied an incorrect classifi CVE-2023-309625.4The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with acc CVE-2023-309635.4A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be CVE-2023-309677.5Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to r CVE-2023-309686.8One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attac CVE-2023-309696.5The Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not performing authentication/authorizati CVE-2023-30977.8A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been rated as critical. This issue affects the function CVE-2023-309706.5Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary CVE-2023-309716.8Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.CVE-2023-30987.8A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restore_all_sound_f CVE-2023-309855.5A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2