CVE-2023-37749 in HubSpot

Riassunto

di MITRE • 27/10/2025

Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: MITRE
• Prenotare: 10/07/2023
• Divulgazione: 27/10/2025
• Moderazione: accettato
• Voce: VDB-330153
• CPE: pronto
• CWE: CWE-284 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00268
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-37749
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-37749
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-37749/