{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-04T19:00:42.247","vulnerabilities":[{"cve":{"id":"CVE-2023-6768","sourceIdentifier":"cve-coordination@incibe.es","published":"2023-12-20T10:15:07.730","lastModified":"2026-06-17T06:51:23.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4. This vulnerability could allow an unauthenticated user to access the admin panel without providing any credentials by simply accessing the \"lp_admin.php?adminstep=\" parameter."},{"lang":"es","value":"Vulnerabilidad de omisión de autenticación en Amazing Little Poll que afecta a las versiones 1.3 y 1.4. Esta vulnerabilidad podría permitir que un usuario no autenticado acceda al panel de administración sin proporcionar ninguna credencial simplemente accediendo al parámetro \"lp_admin.php?adminstep=\"."}],"affected":[{"source":"cve-coordination@incibe.es","affectedData":[{"vendor":"Amazing Little poll","product":"Amazing Little poll","defaultStatus":"unaffected","versions":[{"version":"1.3","status":"affected"},{"version":"1.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve-coordination@incibe.es","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","baseScore":9.4,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":5.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-22T20:34:49.767515Z","id":"CVE-2023-6768","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve-coordination@incibe.es","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mr-corner:amazing_little_poll:1.3:*:*:*:*:*:*:*","matchCriteriaId":"1E9D3BF2-8AF3-44D0-BF44-CFC2F235A129"},{"vulnerable":true,"criteria":"cpe:2.3:a:mr-corner:amazing_little_poll:1.4:*:*:*:*:*:*:*","matchCriteriaId":"E224C9C6-B463-4167-91E6-565DE9C5E1F7"}]}]}],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amazing-little-poll","source":"cve-coordination@incibe.es","tags":["Third Party Advisory"]},{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amazing-little-poll","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}