CVE-2023-22738

CVE-2023-22738 affects vantage6, a federated learning infrastructure, by allowing an administrator to inadvertently assign existing users to incorrect organizations. This misassignment can lead to unauthorized access, as users retain their original permissions, potentially exposing sensitive data. The vulnerability has a CVSS score of 6.5 (Medium), indicating it can be exploited remotely with low attack complexity and requires low privileges, resulting in high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.