CVE-2023-38752

MediumCVSS 4.3

Published: 09/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

29th percentile - higher than 29% of all known CVEs

Summary

CVE-2023-38752 describes an improper authorization vulnerability in the Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7, allowing authorized API users to view attribute information of posters marked as 'non-disclosure'.

Risk Assessment

The risk associated with this vulnerability is the potential exposure of sensitive information, which could lead to privacy breaches and undermine trust in the system.

Recommendation

It is recommended to upgrade to the latest version of the software to eliminate this authorization flaw and review the system's security settings.

Original NVD description (English source)

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings.