CVE-2023-48865: Reportico affected by Incorrect Access Control

April 12, 2024

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL.

References

gist.github.com/aashiqahamedn/39383cfbc639cbdc3e1a7d74b977aeae
github.com/advisories/GHSA-pww3-x2g7-x8q2
github.com/reportico-web/reportico
github.com/reportico-web/reportico/issues/51
nvd.nist.gov/vuln/detail/CVE-2023-48865

Code Behaviors & Features

Detect and mitigate CVE-2023-48865 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →