CVE-2023-3091
Captura CRYPTBASE.dll uncontrolled search path
- State
- Published
- Severity
- 7.0 High
- Published
- Jun 3, 2023
- Updated
- Aug 2, 2024
- Reserved
- Jun 3, 2023
Description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This vulnerability affects unknown code in the library CRYPTBASE.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation appears to be difficult. The identifier of this vulnerability is VDB-230668. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.0 High | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | VulDB |
| 3.0 | 7.0 High | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | VulDB |
| 2.0 | 6.0 Medium | AV:L/AC:H/Au:S/C:C/I:C/A:C | VulDB |
Weaknesses
- CWE-427 Uncontrolled Search Path
Affected Products
| Product | Versions |
|---|---|
Capturan/a |
|
References
- https://vuldb.com/?id.230668vdb-entrytechnical-description
- https://vuldb.com/?ctiid.230668signature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.