CVE-2023-50093 Other in n/a

Medium 5.4 Published Updated

Host Header Injection in Broadcom Layer7 API Gateway Manager allows attackers to bypass security controls or poison caches.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
None listed

What is CVE-2023-50093?

CVE-2023-50093 is a medium-severity vulnerability in n/a, published on 3 Jan 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

APIIDA API Gateway Manager for Broadcom Layer7 v2023.2.2 is vulnerable to Host Header Injection.

Weakness: CWE-74

Which versions are affected by CVE-2023-50093?

It affects 1 product.

Products include Apiida Api Gateway Manager.

How do I fix CVE-2023-50093?

No fix has been published for CVE-2023-50093 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-50093 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-50093 exists.

Sources

Also known as GHSA-3xxx-9v43-6x26.

Is CVE-2023-50093 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free