← All advisories

Critical severity9.8NVD Advisory· Published Jan 16, 2024· Updated Jun 17, 2026

CVE-2023-39691

CVE-2023-39691

Description

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.

Affected products

3

Kodcloud/Kodbox
cpe:2.3:a:kodcloud:kodbox:*:*:*:*:*:*:*:*
Range: <=1.43
Kodbox/kodboxcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.43

Patches

Vulnerability mechanics

References

1

blog.mo60.cn/index.php/archives/kodbox_Logical.htmlnvdPermissions Required

News mentions

0

No linked articles in our index yet.