CVE-2023-1663 is a forced browsing vulnerability affecting Synopsys Coverity versions prior to 2023.3.2, stemming from an insecure Apache Tomcat servlet mapping. This allows unauthorized access to authenticated resources, specifically the downloads directory and its contents. The vulnerability has a CVSS v3.1 score of 5.3 (Medium), indicating it can be exploited remotely with low complexity, leading to potential disclosure of sensitive information. While the EPSS score is low, suggesting limited exploitability in the wild, there is currently no public exploit code available, and it lacks significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2023.3.2CPE matchmatch criteria | cpe:2.3:a:synopsys:coverity:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.