VDB
CVE-2023-28144
CVE-2023-28144
PUBLISHED
CVSS 9.100000381469727 CRITICAL
KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and elevate_perf_privileges.sh chown calls.
EPSS 0.29% · 21.4th percentile
Risk Scores
CVSS 4.0
9.100000381469727
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.29%
21.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| kdab | hotspot | 1.3.0 |
| n/a | n/a | *, n/a |
Timeline
- Mar 14, 2023 CVE Published
- Mar 14, 2023 PoC Published
- Mar 15, 2023 EPSS Score
- Apr 23, 2023 EPSS Score
- Jun 2, 2023 EPSS Score
- Jul 11, 2023 EPSS Score
- Aug 20, 2023 EPSS Score
- Sep 28, 2023 EPSS Score
- Nov 6, 2023 EPSS Score
- Dec 16, 2023 EPSS Score
- Jan 24, 2024 EPSS Score
- Mar 3, 2024 EPSS Score