GHSA-4cvp-hr63-822j

Source

https://github.com/advisories/GHSA-4cvp-hr63-822j

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/05/GHSA-4cvp-hr63-822j/GHSA-4cvp-hr63-822j.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-4cvp-hr63-822j

Aliases

CVE-2023-31048

Published

2023-05-05T02:19:11Z

Modified

2024-10-09T19:46:43Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Exposure of Sensitive Information in OPC UA .NET Standard Reference Server

Details

This security update resolves a vulnerability in the OPC UA .NET Standard Reference Server that allows remote attackers to send malicious requests that expose sensitive information.

https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2023-31048.pdf

Database specific

{
    "cwe_ids": [
        "CWE-200",
        "CWE-209"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2023-05-05T02:19:11Z",
    "nvd_published_at": "2023-12-12T17:15:07Z",
    "severity": "MODERATE"
}

References

Affected packages

NuGet / OPCFoundation.NetStandard.Opc.Ua.Core

Package

Name: OPCFoundation.NetStandard.Opc.Ua.Core; View open source insights on deps.dev
Purl: pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.4.371.86

Affected versions

0.*

0.0.3

0.0.6

0.0.7

0.0.8

0.0.9

0.1.0

0.1.1

0.1.2

0.1.3

0.1.5

0.1.6

0.1.7

0.1.8

0.1.9

0.2.0

0.2.1

0.2.2

0.2.3

0.2.4

1.*

1.4.363.104-preview

1.4.363.107

1.4.364.40

1.4.365-gfc341ee8c5

1.4.365.1-preview

1.4.365.2

1.4.365.10

1.4.365.23

1.4.365.48

1.4.366.31-preview

1.4.366.38

1.4.367.39

1.4.367.41

1.4.367.42

1.4.367.64-preview

1.4.367.75

1.4.367.95

1.4.367.100

1.4.368.27-preview

1.4.368.33

1.4.368.52-preview

1.4.368.53

1.4.368.58

1.4.369.30

1.4.370.1

1.4.370.9

1.4.370.12

1.4.371.41

1.4.371.50

1.4.371.60

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/05/GHSA-4cvp-hr63-822j/GHSA-4cvp-hr63-822j.json"

NuGet / OPCFoundation.NetStandard.Opc.Ua.Server