VulnerabilityModified
CVE-2023-0909
A vulnerability, which was classified as problematic, was found in cxasm notepad-- 1.22.
MEDIUM 5.5EPSS 0.27%
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability, which was classified as problematic, was found in cxasm notepad-- 1.22. This affects an unknown part of the component Directory Comparison Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The associated identifier of this vulnerability is VDB-221475.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.27% probability · 19th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-404
- Affected
- notepad-- project/notepad--
- Source
- cna@vuldb.com
References
- https://gitee.com/cxasm/notepad--/issues/I6C80ZExploit, Issue Tracking
- https://vuldb.com/?ctiid.221475Permissions Required, Third Party Advisory
- https://vuldb.com/?id.221475Third Party Advisory
- https://gitee.com/cxasm/notepad--/issues/I6C80ZExploit, Issue Tracking
- https://vuldb.com/?ctiid.221475Permissions Required, Third Party Advisory
- https://vuldb.com/?id.221475Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.