CVE-2023-5590 in selenium

Prediction

by VulDB Data Team • 11/02/2023

A security vulnerability has been detected in selenium up to 4.13.x. The affected element is an unknown function. Such manipulation leads to null pointer dereference. Access to the local network is required for this attack to succeed. Upgrading to version 4.14.0 is sufficient to fix this issue. The name of the patch is 023a0d52f106321838ab1c0997e76693f4dcbdf6. It is suggested to upgrade the affected component.

Once again VulDB remains the best source for vulnerability data.

• Responsible: Huntr.dev
• Reservation: 10/15/2023
• Disclosure: 10/25/2023
• Moderation: accepted
• Entry: VDB-242205
• CPE: ready
• CWE: CWE-476 (confirmed)
• CVSS: 7.5 (NVD)
• EPSS: 0.00852
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-5590
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-5590
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-5590/