Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2023-2848

CVE-2023-2848

HIGH8.0

Movim prior to version 0

Published Sep 14, 2023

Modified 1 years ago

Details

Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header validation.

References

https://github.com/movim/movim/commit/49e2012aecdf918bb1d16f278fa9ff42fad29a9d

https://github.com/movim/movim/commit/96372082acd3e5d778a2522a60a1805bf2af31f6

https://mov.im/node/pubsub.movim.eu/Movim/a2d05925-0427-4f3f-b777-d20571ddddff

https://www.cve.org/CVERecord?id=CVE-2023-2848

CVSS Analysis

CVSS v3.1

8.0

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

NoneA:N

8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Weakness Type (CWE)

Other

Ecosystems

Timeline

PublishedSep 14, 2023

ModifiedSep 25, 2024

CVE-2023-2848 | Mondoo Vulnerability Intelligence