Vulnerability · Published Nov 22, 2023 · Assigned by TR-CERT
CVE-2023-5921Function Bypass in Geodi
High 7.1
In plain English
A high-severity security flaw in Geodi from DECE Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.2%top 83.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issue affects Geodi: before 8.0.0.27396.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| DECE Software | Geodi | 0 – before 8.0.0.27396 |
Weakness: CWE-841 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
References
- https://www.usom.gov.tr/bildirim/tr-23-0650 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0650 government-resource