CVE-2023-48374

6.5 mediumEPSS 0.6%

Medium (6.5) in csharp cws collaborative development platform. EPSS 0.6% chance of exploitation in the next 30 days.

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service or obtain sensitive information.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2023-12-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

csharp:cws_collaborative_development_platform

References

https://www.twcert.org.tw/tw/cp-132-7593-d3e5b-1.html
https://www.twcert.org.tw/tw/cp-132-7593-d3e5b-1.html

Check your stack JSON