12Ara
CVE-2023-49805 | louislam uptime-kuma up to 1.23.8 environment missing origin validation in websockets (GHSA-mj22-23ff-2hrr)
A vulnerability was found in louislam uptime-kuma up to 1.23.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument environment leads to missing origin validation in websockets. This vulnerability is known as CVE-2023-49805. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.