Read the docs
TI-2023-04894 Aliases CVE-2023-5321GHSA-q6vg-73mw-85mw

Missing Authorization in hamza417/inure

Priority MEDIUM 58CWE-862Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-862.

Summary

Missing Authorization in GitHub repository hamza417/inure prior to build94.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00274 19th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed hamza417/inure (hamza417): build94

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
hamza417hamza417/inurebefore build94build94Patch availableCNA
  • hamza417/inure Vendorhamza417 Affected before build94 Fixed in build94 Patch available CNA

CPE configurations NVD · 43

CPEVersionsRoleVendor
cpe:2.3:a:hamza417:inure:build44:*:*:*:*:android:*:*build44Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build45:*:*:*:*:android:*:*build45Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build46:*:*:*:*:android:*:*build46Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build47:*:*:*:*:android:*:*build47Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build48:*:*:*:*:android:*:*build48Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build49:*:*:*:*:android:*:*build49Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build51:*:*:*:*:android:*:*build51Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build52:*:*:*:*:android:*:*build52Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build53:*:*:*:*:android:*:*build53Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build55:*:*:*:*:android:*:*build55Vulnerablehamza417
  • cpe:2.3:a:hamza417:inure:build44:*:*:*:*:android:*:* Versions build44 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build45:*:*:*:*:android:*:* Versions build45 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build46:*:*:*:*:android:*:* Versions build46 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build47:*:*:*:*:android:*:* Versions build47 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build48:*:*:*:*:android:*:* Versions build48 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build49:*:*:*:*:android:*:* Versions build49 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build51:*:*:*:*:android:*:* Versions build51 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build52:*:*:*:*:android:*:* Versions build52 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build53:*:*:*:*:android:*:* Versions build53 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build55:*:*:*:*:android:*:* Versions build55 Vulnerable ·hamza417
Show 33 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:hamza417:inure:build56:*:*:*:*:android:*:*build56Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build57:*:*:*:*:android:*:*build57Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build58:*:*:*:*:android:*:*build58Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build59:*:*:*:*:android:*:*build59Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build60:*:*:*:*:android:*:*build60Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build61:*:*:*:*:android:*:*build61Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build62:*:*:*:*:android:*:*build62Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build63:*:*:*:*:android:*:*build63Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build64:*:*:*:*:android:*:*build64Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build65:*:*:*:*:android:*:*build65Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build66:*:*:*:*:android:*:*build66Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build67:*:*:*:*:android:*:*build67Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build68:*:*:*:*:android:*:*build68Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build69:*:*:*:*:android:*:*build69Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build70:*:*:*:*:android:*:*build70Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build71:*:*:*:*:android:*:*build71Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build72:*:*:*:*:android:*:*build72Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build73:*:*:*:*:android:*:*build73Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build74:*:*:*:*:android:*:*build74Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build75:*:*:*:*:android:*:*build75Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build76:*:*:*:*:android:*:*build76Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build77:*:*:*:*:android:*:*build77Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build78:*:*:*:*:android:*:*build78Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build79:*:*:*:*:android:*:*build79Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build80:*:*:*:*:android:*:*build80Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build83:*:*:*:*:android:*:*build83Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build85:*:*:*:*:android:*:*build85Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build86:*:*:*:*:android:*:*build86Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build87:*:*:*:*:android:*:*build87Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build88:*:*:*:*:android:*:*build88Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build89:*:*:*:*:android:*:*build89Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build92:*:*:*:*:android:*:*build92Vulnerablehamza417
cpe:2.3:a:hamza417:inure:build93:*:*:*:*:android:*:*build93Vulnerablehamza417
  • cpe:2.3:a:hamza417:inure:build56:*:*:*:*:android:*:* Versions build56 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build57:*:*:*:*:android:*:* Versions build57 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build58:*:*:*:*:android:*:* Versions build58 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build59:*:*:*:*:android:*:* Versions build59 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build60:*:*:*:*:android:*:* Versions build60 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build61:*:*:*:*:android:*:* Versions build61 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build62:*:*:*:*:android:*:* Versions build62 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build63:*:*:*:*:android:*:* Versions build63 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build64:*:*:*:*:android:*:* Versions build64 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build65:*:*:*:*:android:*:* Versions build65 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build66:*:*:*:*:android:*:* Versions build66 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build67:*:*:*:*:android:*:* Versions build67 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build68:*:*:*:*:android:*:* Versions build68 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build69:*:*:*:*:android:*:* Versions build69 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build70:*:*:*:*:android:*:* Versions build70 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build71:*:*:*:*:android:*:* Versions build71 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build72:*:*:*:*:android:*:* Versions build72 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build73:*:*:*:*:android:*:* Versions build73 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build74:*:*:*:*:android:*:* Versions build74 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build75:*:*:*:*:android:*:* Versions build75 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build76:*:*:*:*:android:*:* Versions build76 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build77:*:*:*:*:android:*:* Versions build77 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build78:*:*:*:*:android:*:* Versions build78 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build79:*:*:*:*:android:*:* Versions build79 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build80:*:*:*:*:android:*:* Versions build80 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build83:*:*:*:*:android:*:* Versions build83 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build85:*:*:*:*:android:*:* Versions build85 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build86:*:*:*:*:android:*:* Versions build86 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build87:*:*:*:*:android:*:* Versions build87 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build88:*:*:*:*:android:*:* Versions build88 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build89:*:*:*:*:android:*:* Versions build89 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build92:*:*:*:*:android:*:* Versions build92 Vulnerable ·hamza417
  • cpe:2.3:a:hamza417:inure:build93:*:*:*:*:android:*:* Versions build93 Vulnerable ·hamza417

Remediation

  • Fix · CNA hamza417/inure (hamza417) Fixed in build94

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-5321
  2. 2026-10-03 Alias added: GHSA-q6vg-73mw-85mw

References

Exploit 1

Patch 1

  • TI-2023-04093 Improper Input Validation in hamza417/inure CVSS 3.1MEDIUM 5.5
  • TI-2023-04092 Missing Authorization in hamza417/inure CVSS 3.1MEDIUM 6.1
  • TI-2023-05397 Missing Authorization in hamza417/inure CVSS 3.1LOW 3.3
  • TI-2023-04490 Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure CVSS 3.1HIGH 7.5
  • TI-2023-04491 Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences