CVE-2023-48028

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-48028
kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://gist.github.com/bugplorer/9ae8ad7a9f2a3053ebd07a1b7b54deae Broken Link
https://nitipoom-jar.github.io/CVE-2023-48028/ Exploit
https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48028
https://gist.github.com/bugplorer/9ae8ad7a9f2a3053ebd07a1b7b54deae Broken Link
https://nitipoom-jar.github.io/CVE-2023-48028/ Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:kodcloud:kodbox:1.46.01:*:*:*:*:*:*:*
History

29 Sep 2025, 14:16

Type Values Removed Values Added
References
  • () https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48028 -

21 Nov 2024, 08:31

Type Values Removed Values Added
References () https://gist.github.com/bugplorer/9ae8ad7a9f2a3053ebd07a1b7b54deae - Broken Link () https://gist.github.com/bugplorer/9ae8ad7a9f2a3053ebd07a1b7b54deae - Broken Link
References () https://nitipoom-jar.github.io/CVE-2023-48028/ - Exploit () https://nitipoom-jar.github.io/CVE-2023-48028/ - Exploit

25 Nov 2023, 02:14

Type Values Removed Values Added
First Time Kodcloud kodbox
Kodcloud
CPE cpe:2.3:a:kodcloud:kodbox:1.46.01:*:*:*:*:*:*:*
CWE CWE-307
References () https://gist.github.com/bugplorer/9ae8ad7a9f2a3053ebd07a1b7b54deae - () https://gist.github.com/bugplorer/9ae8ad7a9f2a3053ebd07a1b7b54deae - Broken Link
References () https://nitipoom-jar.github.io/CVE-2023-48028/ - () https://nitipoom-jar.github.io/CVE-2023-48028/ - Exploit
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8

18 Nov 2023, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-11-18 00:15

Updated : 2025-09-29 14:16

NVD link : CVE-2023-48028

Mitre link : CVE-2023-48028

CVE.ORG link : CVE-2023-48028

JSON object : View

Products Affected

kodcloud

  • kodbox
CWE
CWE-307

Improper Restriction of Excessive Authentication Attempts