← Database

CVE-2023-0959

MEDIUM CVSS: 6.5 Published: 2023-04-05 Modified: 2026-06-17

Description

Bhima version 1.27.0 allows a remote attacker to update the privileges of any account registered in the application via a malicious link sent to an administrator. This is possible because the application is vulnerable to CSRF.

Affected Platforms

Imaworldhealth Bhima

Weakness Type

CWE-269, CWE-269

References