CVE-2023-0785 is a sensitive information exposure vulnerability in SourceCodester Best Online News Portal 1.0, specifically within the check_availability.php file. By manipulating the 'username' argument, an attacker can extract sensitive data through data queries. The vulnerability has a low severity CVSS score of 3.7, indicating a network attack vector with high attack complexity and a low impact on confidentiality. While remote exploitation is possible, the difficulty of exploitation is considered high. Despite public disclosure of the exploit, there is no evidence of active exploitation, and no exploit intelligence (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are also minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:mayurik:best_online_news_portal:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.