Vulnerabilities > CVE-2023-38195 - Unspecified vulnerability in Datalust SEQ

CVSS 4.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

datalust

NVD

Published: 2023-07-22

Updated: 2023-08-01

Summary

Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external (SQL Server or PostgreSQL) metadata storage is used. Exploitation can only occur from a high-privileged user account.

Vulnerable Configurations

Part	Description	Count
Application	Datalust Datalust SEQ 1.3. Datalust SEQ 1.3.9 Datalust SEQ 1.3.10 Datalust SEQ 1.3.11 Datalust SEQ 1.4.6 Datalust SEQ 1.4.7 Datalust SEQ 1.4.8 Datalust SEQ 1.4.9 Datalust SEQ 1.4.10 Datalust SEQ 1.4.11 Datalust SEQ 1.4.12 Datalust SEQ 1.5.16 Datalust SEQ 1.5.17 Datalust SEQ 1.5.18 Datalust SEQ 1.5.19 Datalust SEQ 1.6.4 Datalust SEQ 1.6.5 Datalust SEQ 1.6.6 Datalust SEQ 1.6.7 Datalust SEQ 1.6.8 Datalust SEQ 1.6.9 Datalust SEQ 1.6.10 Datalust SEQ 1.6.11 Datalust SEQ 1.6.12 Datalust SEQ 1.6.13 Datalust SEQ 2.0.19 Datalust SEQ 2.1.21 Datalust SEQ 2.1.22 Datalust SEQ 2.2.8 Datalust SEQ 2.3.3 Datalust SEQ 2.3.4 Datalust SEQ 2.4.2 Datalust SEQ 3.0.30 Datalust SEQ 3.1.16 Datalust SEQ 3.1.17 Datalust SEQ 3.2.16 Datalust SEQ 3.3.20 Datalust SEQ 3.3.21 Datalust SEQ 3.3.22 Datalust SEQ 3.3.23 Datalust SEQ 3.4.17 Datalust SEQ 3.4.18 Datalust SEQ 3.4.20 Datalust SEQ 4.0.58 Datalust SEQ 4.0.60 Datalust SEQ 4.1.14 Datalust SEQ 4.1.16 Datalust SEQ 4.1.17 Datalust SEQ 4.2.470 Datalust SEQ 4.2.476 Datalust SEQ 4.2.605 Datalust SEQ 4.2.717 Datalust SEQ 4.2.822 Datalust SEQ 4.2.839 Datalust SEQ 4.2.1113 Datalust SEQ 5.0.2287 Datalust SEQ 5.0.2296 Datalust SEQ 5.0.2313 Datalust SEQ 5.0.2360 Datalust SEQ 5.0.2375 Datalust SEQ 5.0.2394 Datalust SEQ 5.0.2497 Datalust SEQ 5.0.2787 Datalust SEQ 5.0.2817 Datalust SEQ 5.1.2976 Datalust SEQ 5.1.3000 Datalust SEQ 5.1.3004 Datalust SEQ 5.1.3093 Datalust SEQ 5.1.3118 Datalust SEQ 5.1.3200 Datalust SEQ 5.1.3364 Datalust SEQ 2020.1.4212 Datalust SEQ 2020.1.4235 Datalust SEQ 2020.1.4292 Datalust SEQ 2020.2.4591 Datalust SEQ 2020.2.4593 Datalust SEQ 2020.3.4761 Datalust SEQ 2020.4.5070 Datalust SEQ 2020.4.5089 Datalust SEQ 2020.4.5119 Datalust SEQ 2020.5.5163 Datalust SEQ 2021.1.5282 Datalust SEQ 2021.1.5307 Datalust SEQ 2021.1.5425 Datalust SEQ 2021.2.5495 Datalust SEQ 2021.2.5595 Datalust SEQ 2021.2.5647 Datalust SEQ 2021.2.6259 Datalust SEQ 2021.2.6288 Datalust SEQ 2021.2.6459 Datalust SEQ 2021.3.6651 Datalust SEQ 2021.3.6660 Datalust SEQ 2021.3.6681 Datalust SEQ 2021.3.6800 Datalust SEQ 2021.4.6986 Datalust SEQ 2021.4.7192 Datalust SEQ 2022.1.7378 Datalust SEQ 2022.1.7449 Datalust SEQ 2022.1.7647 Datalust SEQ 2022.1.7929 Datalust SEQ 2023.1.8829 Datalust SEQ 2023.1.8847 Datalust SEQ 2023.1.8876 Datalust SEQ 2023.1.8899 Datalust SEQ 2023.1.8948 Datalust SEQ 2023.1.8991 Datalust SEQ 2023.1.9101 Datalust SEQ 2023.1.9133 Datalust SEQ 2023.1.9162 Datalust SEQ 2023.1.9229 Datalust SEQ 2023.2.9372	111

References

https://github.com/datalust/seq-tickets/issues/1886