CVE-2023-5321

moderate-risk

Published 2023-09-30

Missing Authorization in GitHub repository hamza417/inure prior to build94.

Do I need to act?

0.03% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Inure

Hamza417

Patch https://github.com/hamza417/inure/commit/57fda918bfd2fb863f579841a46363fe8e10c29...

Exploit https://huntr.dev/bounties/b1becc68-e738-458f-bd99-06ee77580d3a

Patch https://github.com/hamza417/inure/commit/57fda918bfd2fb863f579841a46363fe8e10c29...

Exploit https://huntr.dev/bounties/b1becc68-e738-458f-bd99-06ee77580d3a

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 25/34 · High