CVE-2023-1246 Files or Directories Accessible to External Parties in Saysis Starcities
Attackers can access files or directories accessible to external parties in Saysis Starcities, leading to data disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-1246?
CVE-2023-1246 is a high-severity vulnerability in Saysis Starcities, published on 10 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.
This issue affects Starcities: through 1.3.
Weakness: CWE-552
Which versions are affected by CVE-2023-1246?
It affects 1 product.
Products include Saysis Starcities.
How do I fix CVE-2023-1246?
No fix has been published for CVE-2023-1246 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-1246 being exploited?
There is no known exploitation of CVE-2023-1246 in the wild and no public exploit code.
Other vulnerabilities in Saysis Starcities
Sources
Also known as GHSA-mqx3-4hhf-cvpv.