Obl.ong

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Obl.ong records in CISA KEV

No Obl.ong vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Admin · all components

TI-2023-25237 CVE-2023-46754 · GHSA-pj99-jgm5-c727

LOW 30

The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0045 Published 2023-10-26 No fix listed CWE-863