CVE-2023-4565

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailable.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-456508.8Cross-Site Request Forgery (CSRF) vulnerability in Fla-shop.Com HTML5 Maps plugin <= 1.7.1.4 versions.CVE-2023-456518.8Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP AttacCVE-2023-456526.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Justin Silver Remote Content Shortcode allowCVE-2023-456538.8Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin <= 6.0 versions.CVE-2023-456548.8Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions.CVE-2023-456558.8Cross-Site Request Forgery (CSRF) vulnerability in PixelGrade PixFields plugin <= 0.7.0 versions.CVE-2023-456568.8Cross-Site Request Forgery (CSRF) vulnerability in Kevin Weber Lazy Load for Videos plugin <= 2.18.2 versions.CVE-2023-456579.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.TCVE-2023-456587.6Missing Authorization vulnerability in POSIMYTH Nexter.This issue affects Nexter: from n/a through 2.0.3.CVE-2023-456592.8Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' accoCVE-2023-45667.5Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect serCVE-2023-456604.3Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, target and cookies al
CVE-2023-4565: Medium severity, CVSS 5.3 | Vulnix