Vulnerabilities > CVE-2023-44400 - Unspecified vulnerability in Uptime.Kuma Uptime Kuma

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

uptime-kuma

NVD

Published: 2023-10-09

Updated: 2024-11-21

Summary

Uptime Kuma is a self-hosted monitoring tool. Prior to version 1.23.3, attackers with access to a user's device can gain persistent account access. This is caused by missing verification of Session Tokens after password changes and/or elapsed inactivity periods. Version 1.23.3 has a patch for the issue.

Vulnerable Configurations

Part	Description	Count
Application	Uptime.Kuma Uptime.Kuma Uptime Kuma 1.0.0 Uptime.Kuma Uptime Kuma 1.0.1 Uptime.Kuma Uptime Kuma 1.0.2 Uptime.Kuma Uptime Kuma 1.0.3 Uptime.Kuma Uptime Kuma 1.0.4 Uptime.Kuma Uptime Kuma 1.0.5 Uptime.Kuma Uptime Kuma 1.0.6 Uptime.Kuma Uptime Kuma 1.0.7 Uptime.Kuma Uptime Kuma 1.0.8 Uptime.Kuma Uptime Kuma 1.0.9 Uptime.Kuma Uptime Kuma 1.0.10 Uptime.Kuma Uptime Kuma 1.1.0 Uptime.Kuma Uptime Kuma 1.2.0 Uptime.Kuma Uptime Kuma 1.3.0 Uptime.Kuma Uptime Kuma 1.3.1 Uptime.Kuma Uptime Kuma 1.3.2 Uptime.Kuma Uptime Kuma 1.5.0 Uptime.Kuma Uptime Kuma 1.5.1 Uptime.Kuma Uptime Kuma 1.5.2 Uptime.Kuma Uptime Kuma 1.5.3 Uptime.Kuma Uptime Kuma 1.6.0 Uptime.Kuma Uptime Kuma 1.6.1 Uptime.Kuma Uptime Kuma 1.6.2 Uptime.Kuma Uptime Kuma 1.6.3 Uptime.Kuma Uptime Kuma 1.7.0 Uptime.Kuma Uptime Kuma 1.7.1 Uptime.Kuma Uptime Kuma 1.7.2 Uptime.Kuma Uptime Kuma 1.7.3 Uptime.Kuma Uptime Kuma 1.8.0 Uptime.Kuma Uptime Kuma 1.9.0 Uptime.Kuma Uptime Kuma 1.9.1 Uptime.Kuma Uptime Kuma 1.9.2 Uptime.Kuma Uptime Kuma 1.10.0 Uptime.Kuma Uptime Kuma 1.10.1 Uptime.Kuma Uptime Kuma 1.10.2 Uptime.Kuma Uptime Kuma 1.11.0 Uptime.Kuma Uptime Kuma 1.11.1 Uptime.Kuma Uptime Kuma 1.11.2 Uptime.Kuma Uptime Kuma 1.11.3 Uptime.Kuma Uptime Kuma 1.11.4 Uptime.Kuma Uptime Kuma 1.12.0 Uptime.Kuma Uptime Kuma 1.12.1 Uptime.Kuma Uptime Kuma 1.13.0 Uptime.Kuma Uptime Kuma 1.13.1 Uptime.Kuma Uptime Kuma 1.13.2 Uptime.Kuma Uptime Kuma 1.14.0 Uptime.Kuma Uptime Kuma 1.14.1 Uptime.Kuma Uptime Kuma 1.15.0 Uptime.Kuma Uptime Kuma 1.15.1 Uptime.Kuma Uptime Kuma 1.16.0 Uptime.Kuma Uptime Kuma 1.16.1 Uptime.Kuma Uptime Kuma 1.17.0 Uptime.Kuma Uptime Kuma 1.17.1 Uptime.Kuma Uptime Kuma 1.18.0 Uptime.Kuma Uptime Kuma 1.18.1 Uptime.Kuma Uptime Kuma 1.18.2 Uptime.Kuma Uptime Kuma 1.18.3 Uptime.Kuma Uptime Kuma 1.18.4 Uptime.Kuma Uptime Kuma 1.18.5 Uptime.Kuma Uptime Kuma 1.19.0 Uptime.Kuma Uptime Kuma 1.19.1 Uptime.Kuma Uptime Kuma 1.19.2 Uptime.Kuma Uptime Kuma 1.19.3 Uptime.Kuma Uptime Kuma 1.19.4 Uptime.Kuma Uptime Kuma 1.19.5 Uptime.Kuma Uptime Kuma 1.19.6 Uptime.Kuma Uptime Kuma 1.20.0 Uptime.Kuma Uptime Kuma 1.20.1 Uptime.Kuma Uptime Kuma 1.20.2 Uptime.Kuma Uptime Kuma 1.21.0 Uptime.Kuma Uptime Kuma 1.21.1 Uptime.Kuma Uptime Kuma 1.21.2 Uptime.Kuma Uptime Kuma 1.21.3 Uptime.Kuma Uptime Kuma 1.22.0 Uptime.Kuma Uptime Kuma 1.22.1 Uptime.Kuma Uptime Kuma 1.23.0 Uptime.Kuma Uptime Kuma 1.23.1 Uptime.Kuma Uptime Kuma 1.23.2	100

Summary

Vulnerable Configurations

References