CVE Awaiting Analysis

NIST Information Technology Laboratory NATIONAL VULNERABILITY DATABASE VULNERABILITIES Site Banner CVE-2023-39848 Detail AWAITING ANALYSIS This vulnerability is currently awaiting analysis. Description DVWA v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at blind\source\high.php. Severity CVSS Version 3.x CVSS Version 2.0 CVSS 3.x Severity and Metrics: NVD NIST: NVD Base Score: N/A NVD score not yet provided. NVD Analysts use publicly available information to associate vector strings and CVSS scores. We also display any CVSS information provided within the CVE List from the CNA.

A screenshot of the NIST National Vulnerability Database shows the detail page for CVE-2023-39848, describing an SQL injection vulnerability in DVWA v1.0. The joke is that someone eager to add a CVE to their résumé has submitted a vulnerability, but the database is still “awaiting analysis” and has no severity score yet.

• @infosecmemes / 859 2023-08-17