CVE-2023-48260

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
RexrothNexo cordless nutrunner NXA015S-36V (0608842001)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXA030S-36V (0608842002)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXA050S-36V (0608842003)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXP012QD-36V (0608842005)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXA015S-36V-B (0608842006)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXA030S-36V-B (0608842007)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXA050S-36V-B (0608842008)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXP012QD-36V-B (0608842010)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXA011S-36V (0608842011)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXA011S-36V-B (0608842012)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXA065S-36V (0608842013)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXA065S-36V-B (0608842014)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXV012T-36V (0608842015)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo cordless nutrunner NXV012T-36V-B (0608842016)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo special cordless nutrunner (0608PE2272)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo special cordless nutrunner (0608PE2301)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo special cordless nutrunner (0608PE2514)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo special cordless nutrunner (0608PE2515)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo special cordless nutrunner (0608PE2666)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2
RexrothNexo special cordless nutrunner (0608PE2673)>= NEXO-OS V1000-Release, <= NEXO-OS V1500-SP2

References

Timeline

Published
Jan 10, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-482617.5The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.CVE-2023-482629.8The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code ExeCVE-2023-482639.8The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code ExeCVE-2023-482649.8The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code ExeCVE-2023-482659.8The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code ExeCVE-2023-482669.8The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code ExeCVE-2023-482677.9Improper buffer restrictions in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to poCVE-2023-482687.5Mattermost fails to limit the amount of data extracted from compressed archives during board import in Mattermost Boards allowing an attackeCVE-2023-48278.8The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the `fs_connector` AJAX action. This allows attacCVE-2023-482707.2A stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially craCVE-2023-482715.3Authentication Bypass by Spoofing vulnerability in yonifre Maspik – Spam blacklist allows Accessing Functionality Not Properly Constrained bCVE-2023-482726.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows
CVE-2023-48260: High severity, CVSS 7.5 | Vulnix