What’s Vulnerable › Vulnerabilities

CVE-2023-42334

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-09-20 · updated 2026-06-17
• Weakness: CWE-639

Description

An Indirect Object Reference (IDOR) in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to escalate privileges via the user parameter.

Affected products

• Fl3Xx Crew: 2.10.37
• Fl3Xx Dispatch: 2.10.37

References

• https://0xhunter20.medium.com/an-idor-lead-to-viewing-other-users-files-cve-2023-42334-702de328c453
• https://0xhunter20.medium.com/an-idor-lead-to-viewing-other-users-files-cve-2023-42334-702de328c453

Get alerted when CVE-2023-42334 or the next vulnerability affects your stack