MEDIUM🇬🇧 English

CVE-2023-44400

CVSS 6.7v3.1pub. 2023-10-09upd. 2024-11-21

Uptime Kuma is a self-hosted monitoring tool. Prior to version 1.23.3, attackers with access to a user's device can gain persistent account access. This is caused by missing verification of Session Tokens after password changes and/or elapsed inactivity periods. Version 1.23.3 has a patch for the issue.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Uptime.kuma Uptime Kuma

    APP
    Uptime.Kuma
    < 1.23.3
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2026-33130MEDIUM6.5ten sam produkt

Uptime Kuma is an open source, self-hosted monitoring tool. In versions 1.23.0 through 2.2.0, the fix from GHS...

CVE-2026-32230MEDIUM5.3ten sam produkt

Uptime Kuma is an open source, self-hosted monitoring tool. From 2.0.0 to 2.1.3 , the GET /api/badge/:id/ping/...

CVE-2023-49804MEDIUM6.7ten sam produkt

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their ...

CVE-2023-49805MEDIUM6.0ten sam produkt

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, the application uses WebSo...

CVE-2023-49276MEDIUM6.3ten sam produkt

Uptime Kuma is an open source self-hosted monitoring tool. In affected versions the Google Analytics element i...