CVE-2023-1246 - CVE House
Back to Database
Status published High CVE-2023-1246

Files or Directories Accessible to External Parties in Saysis Starcities

Vulnerability Description

Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations. This issue affects Starcities: through 1.3.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-1246

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Ufukcan DAL

References

More from Saysis

View All →
CVE-2023-1198
SQLi in Saysis Starcities
Critical 9.8
CVE-2022-2178
XSS in Saysis' Starcities
Medium 6.1

Affected Vendor

Affected Software

Starcities
Vulnerable Versions:
0

Timeline

Official Publish: March 10th, 2023
Last Modified: June 1st, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-552

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1083 File and Directory Discovery
Discovery
T1005 Data from Local System
Collection
T1041 Exfiltration Over C2 Channel
Exfiltration
T1565 Data Manipulation
Impact