CVE-2023-2848
- Source
- https://cve.org/CVERecord?id=CVE-2023-2848
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-2848.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-2848
- Downstream
- Published
- 2023-09-14T11:36:50.521Z
- Modified
- 2026-07-11T03:53:16.599294315Z
- Severity
-
- 8.0 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header validation.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2848.json", "cna_assigner": "snyk", "cwe_ids": [ "CWE-1385" ] }- References
-
- https://mov.im/node/pubsub.movim.eu/Movim/a2d05925-0427-4f3f-b777-d20571ddddff
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2848.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-2848
- https://github.com/movim/movim/commit/49e2012aecdf918bb1d16f278fa9ff42fad29a9d
- https://github.com/movim/movim/commit/96372082acd3e5d778a2522a60a1805bf2af31f6
Affected packages
Git / github.com/movim/movim
Affected ranges
- Type
- GIT
- Repo
- https://github.com/movim/movim
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixed
- Database specific
{ "source": [ "CPE_RANGE", "REFERENCES" ], "extracted_events": [ { "introduced": "0" }, { "fixed": "0.22" } ], "cpe": "cpe:2.3:a:movim:movim:*:*:*:*:*:*:*:*" }
Affected versions
0.*
0.14.1
v0.*
v0.1
v0.10
v0.11
v0.11alpha1
v0.13
v0.14
v0.14.1
v0.14.1rc
v0.14.1rc2
v0.14.1rc3
v0.14.1rc4
v0.14.1rc5
v0.14.2rc4
v0.14.2rc5
v0.14.2rc6
v0.14.2rc7
v0.14alpha2
v0.14alpha5
v0.14alpha6
v0.14beta
v0.14rc
v0.14rc2
v0.15
v0.15rc1
v0.16
v0.16.1
v0.17
v0.17.1
v0.18
v0.18.1rc0
v0.18.1rc1
v0.18.1rc2
v0.18.1rc3
v0.18.1rc4
v0.18.1rc5
v0.18.1rc6
v0.18.1rc7
v0.18.1rc8
v0.18rc1
v0.18rc10
v0.18rc11
v0.18rc12
v0.18rc13
v0.18rc14
v0.18rc2
v0.18rc3
v0.18rc4
v0.18rc5
v0.18rc6
v0.18rc7
v0.18rc8
v0.18rc9
v0.19
v0.19.1rc2
v0.19.1rc3
v0.19.1rc4
v0.19.1rc5
v0.19.1rc6
v0.19.1rc7
v0.19rc1
v0.19rc2
v0.19rc3
v0.2
v0.20
v0.20rc0
v0.20rc1
v0.20rc2
v0.20rc3
v0.20rc4
v0.20rc6
v0.21
v0.21.1
v0.21rc0
v0.21rc1
v0.21rc10
v0.21rc11
v0.21rc2
v0.21rc3
v0.21rc4
v0.21rc5
v0.21rc6
v0.21rc7
v0.21rc8
v0.21rc9
v0.9