{"id":"CVE-2023-40918","aliases":["EUVD-2023-45457","GHSA-cwh3-w7qq-r8mf"],"status":"published","title":"KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a...","description":"KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin role.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00705,"percentile":0.53788,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2023-09-05T00:00:00Z","modified":"2026-10-28T02:31:06Z","products":[{"vendor":"knowstreaming_project","product":"knowstreaming"}],"references":[{"url":"https://github.com/didi/KnowStreaming/issues/1128","tags":["x_transferred","Exploit","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40918","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cwh3-w7qq-r8mf"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40918.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-40918","description":"KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin role.","status":"published","published":"2023-09-05T00:00:00Z","modified":"2024-09-30T17:29:24.575Z","updated_at":"2026-11-02T14:35:21.971258Z"}],"euvd":[{"id":"EUVD-2023-45457","description":"KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin role.","status":"published","published":"2023-09-05T00:00:00Z","modified":"2024-09-30T17:29:24Z","updated_at":"2026-11-03T00:28:02.402482Z"}],"ghsa":[{"id":"GHSA-cwh3-w7qq-r8mf","title":"KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a...","description":"KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin role.","status":"published","published":"2023-09-05T18:30:23Z","modified":"2024-04-04T07:29:33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:56:51.525022Z"}],"nvd":[{"id":"CVE-2023-40918","description":"KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin role.","status":"published","published":"2023-09-05T18:15:11.317Z","modified":"2026-06-17T06:19:53.977Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:08:27.181588Z"}],"osv":[{"id":"CVE-2023-40918","description":"KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin role.","status":"published","published":"2023-09-05T00:00:00Z","modified":"2026-10-28T02:31:06.156772429Z","updated_at":"2026-11-02T15:44:33.244128Z"}]}}