HIGH

CVE-2023-4168

CVSS v3

7.5

HIGH

EPSS Score

76.6%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unknown function of the file /ad-list of the component Redirect Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-236184. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Technical details

Published
8/5/2023

Frequently asked questions

What is CVE-2023-4168?

A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unknown function of the file /ad-list of the component Redirect Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-236184. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Is CVE-2023-4168 actively exploited?

Active exploitation of CVE-2023-4168 has not been confirmed. The EPSS score is 76.6%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2023-4168?

CVE-2023-4168 has a CVSS v3 base score of 7.5 (HIGH severity).

Is CVE-2023-4168 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.