CVE-2023-38988

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-389894.3An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the AdminCVE-2023-38997.8A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interfacCVE-2023-389904.3An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete menus creCVE-2023-389915.4An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete modelCVE-2023-389929.8jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.CVE-2023-389947.8The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the CVE-2023-389959.8An issue in SCHUHFRIED v.8.22.00 allows remote attacker to obtain the database password via crafted curl command.CVE-2023-389966.7An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command.CVE-2023-389977.2A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Business Edition before 23CVE-2023-389986.1An open redirect in the Login page of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to redirectCVE-2023-389996.5A Cross-Site Request Forgery (CSRF) in the System Halt API (/system/halt) of OPNsense Community Edition before 23.7 and Business Edition befCVE-2023-39007.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before
CVE-2023-38988: Medium severity, CVSS 4.3 | Vulnix