Dashboard / CVE-2023-4910

CVE-2023-4910

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2023-11-06 Modified: 2026-11-07 First seen: 2026-11-07 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: None
A: None

Description

A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
redhat 3scale_api_management 2.0

References & Advisories (2)

https://bugzilla.redhat.com/show_bug.cgi?id=2238498
issue-tracking x_refsource_REDHAT

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.22%
Raw Score 0.002250
Percentile 13.3%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00225
2026-11-12
0.00225
2026-11-10
0.00225
2026-11-09
0.00225
2026-11-08
0.00225
2026-11-07
0.00225
2026-11-06
0.00223

Intelligence Sources

mitre ref →
nvd ref →

External Links