CVE-2023-4876

    Dashboard / Vulnerabilities / CVE-2023-4876

    CVE-2023-4876

    Published: 10 Sept 2023Last Modified: 12 Aug 2026

    Summary: Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure

    Details: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92.

    References: https://huntr.dev/bounties/f729d2c8-a62e-4f30-ac24-e187b0a7892a, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4876.json, https://nvd.nist.gov/vuln/detail/CVE-2023-4876, https://github.com/hamza417/inure/commit/7db5511753089c3cf477475f1f3b62a6e6ede4a8

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -c5ec57a989c124a5a9c49423fa2485c947dbd8bb

    Affected versions

    build91

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-4876 | CVE-DB