CVE-2023-38195

4.9 mediumEPSS 0.5%

Medium (4.9) in datalust seq. EPSS 0.5% chance of exploitation in the next 30 days.

Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external (SQL Server or PostgreSQL) metadata storage is used. Exploitation can only occur from a high-privileged user account.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
Published: 2023-07-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

datalust:seq

References

https://github.com/datalust/seq-tickets/issues/1886
https://github.com/datalust/seq-tickets/issues/1886

Check your stack JSON