High severity7.7NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026
CVE-2023-3289
CVE-2023-3289
Description
A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (including admin). This results in unauthorized data manipulation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- services/servicesdescription
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.