[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4C7FrQbWaTX5_nH2nIJSAGFXTf3fn3F9BklWEHCNyPo":3,"g5a-risk:CVE-2023-22809":248},{"success":4,"data":5,"meta":245},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":65,"references":66,"referencesCount":154,"weaknesses":155,"weaknessesCount":164,"isActivelyExploited":165,"cisaInfo":26,"otxData":26,"relatedBlogPosts":166,"seoMetadata":167,"configurations":192,"relatedVendorCves":229,"notableEvents":230},"CVE-2023-22809","What is CVE-2023-22809?","In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- \u002Fpath\u002Fto\u002Fextra\u002Ffile' value.","In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and...","2023-01-18T17:15:10.353","2025-04-04T16:15:16.85",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.55367,[33,33,33,33,33,33,33],"High",[37,42,45,50,53,58,61],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"sudo_project","sudo","*","cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"1.9.12","cpe:2.3:a:sudo_project:sudo:1.9.12:-:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":51,"criteria":52,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"fedoraproject","fedora","36","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":59,"criteria":60,"vulnerable":4},"37","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":40,"criteria":64,"vulnerable":4},"apple","macos","cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",7,[67,73,76,79,84,89,93,97,100,104,108,112,115,121,126,128,130,132,134,136,138,140,142,144,146,148,150,152],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F171644\u002Fsudo-1.9.12p1-Privilege-Escalation.html","Packetstormsecurity",[71,72],"Third Party Advisory","VDB Entry",{"url":74,"source":69,"tags":75},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F172509\u002FSudoedit-Extra-Arguments-Privilege-Escalation.html",[71,72],{"url":77,"source":69,"tags":78},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F174234\u002FCisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Modification.html",[71,72],{"url":80,"source":81,"tags":82},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2023\u002FAug\u002F21","Seclists",[83,71],"Mailing List",{"url":85,"source":86,"tags":87},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F01\u002F19\u002F1","Openwall",[88,83,71],"Exploit",{"url":90,"source":91,"tags":92},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F01\u002Fmsg00012.html","Debian",[83,71],{"url":94,"source":95,"tags":96},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH\u002F","Fedoraproject",[83],{"url":98,"source":95,"tags":99},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FG4YNBTTKTRT2ME3NTSXAPTOKYUE47XHZ\u002F",[83],{"url":101,"source":102,"tags":103},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202305-12","Gentoo",[71],{"url":105,"source":106,"tags":107},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230127-0015\u002F","Netapp",[71],{"url":109,"source":110,"tags":111},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT213758","Apple",[71],{"url":113,"source":91,"tags":114},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2023\u002Fdsa-5321",[71],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fwww.sudo.ws\u002Fsecurity\u002Fadvisories\u002Fsudoedit_any\u002F","Sudo",[88,119,120],"Mitigation","Vendor Advisory",{"url":122,"source":123,"tags":124},"https:\u002F\u002Fwww.synacktiv.com\u002Fsites\u002Fdefault\u002Ffiles\u002F2023-01\u002Fsudo-CVE-2023-22809.pdf","Synacktiv",[88,119,125,71],"Technical Description",{"url":68,"source":69,"tags":127},[71,72],{"url":74,"source":69,"tags":129},[71,72],{"url":77,"source":69,"tags":131},[71,72],{"url":80,"source":81,"tags":133},[83,71],{"url":85,"source":86,"tags":135},[88,83,71],{"url":90,"source":91,"tags":137},[83,71],{"url":94,"source":95,"tags":139},[83],{"url":98,"source":95,"tags":141},[83],{"url":101,"source":102,"tags":143},[71],{"url":105,"source":106,"tags":145},[71],{"url":109,"source":110,"tags":147},[71],{"url":113,"source":91,"tags":149},[71],{"url":116,"source":117,"tags":151},[88,119,120],{"url":122,"source":123,"tags":153},[88,119,125,71],28,[156],{"id":157,"name":158,"description":159,"extendedDescription":160,"status":161,"abstraction":162,"structure":163},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",1,false,[],{"title":168,"metaDescription":169,"keywords":170,"canonicalUrl":171,"structuredData":172},"What is CVE-2023-22809? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-22809, a high severity cyber security vulnerability from 2023. High exploit probability (55.4%). In Sudo before 1.9.12p2, ...","CVE-2023-22809, CVE-2023-22809 vulnerability, CVE-2023-22809 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, sudo_project security, debian security, fedoraproject security, apple security, sudo vulnerability, debian_linux vulnerability, fedora vulnerability, macos vulnerability","\u002Fwhat-is\u002Fcve-2023-22809",{"@context":173,"@type":174,"headline":168,"description":169,"datePublished":10,"dateModified":11,"author":175,"publisher":179,"about":183,"mainEntityOfPage":187,"articleSection":190,"keywords":191},"https:\u002F\u002Fschema.org","TechArticle",{"@type":176,"name":177,"url":178},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":176,"name":177,"url":178,"logo":180},{"@type":181,"url":182},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":184,"name":6,"description":185,"additionalType":186},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":188,"@id":189},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-22809","Cybersecurity","CVE-2023-22809, CVE-2023-22809 vulnerability, CVE-2023-22809 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[193,206,214,222],{"Operator":26,"Negate":26,"Nodes":194},[195],{"Operator":196,"Negate":26,"CPEMatch":197},"OR",[198,201,203],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":200,"VersionEndExcluding":43,"VersionEndIncluding":26},"E76D2160-BE9D-4C9E-B2AB-B52B3C84DAD7","1.8.0",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":202,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"30B5DA3F-091D-4627-A5C0-2D1487A378B0",{"Vulnerable":4,"Criteria":204,"MatchCriteriaID":205,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:sudo_project:sudo:1.9.12:p1:*:*:*:*:*:*","F30DC131-EACB-47C6-B6B7-FCB78DDBD059",{"Operator":26,"Negate":26,"Nodes":207},[208],{"Operator":196,"Negate":26,"CPEMatch":209},[210,212],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Operator":26,"Negate":26,"Nodes":215},[216],{"Operator":196,"Negate":26,"CPEMatch":217},[218,220],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":221,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E30D0E6F-4AE8-4284-8716-991DFA48CC5D",{"Operator":26,"Negate":26,"Nodes":223},[224],{"Operator":196,"Negate":26,"CPEMatch":225},[226],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":227,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":228,"VersionEndIncluding":26},"ADD1755A-5CD2-4EED-8C6C-4729FADFA3F5","13.4",[],[231,238],{"id":232,"eventType":233,"eventTime":234,"details":235,"label":236,"color":237},"576c7019-abe4-4daf-b1d3-22a3e8b3cc3f","LOW_EPSS_DELTA","2025-11-19T04:05:23.206381+00:00","Daily EPSS score decreased by 0.280 on 2023-12-30","EPSS Score Decreased","green",{"id":239,"eventType":240,"eventTime":241,"details":242,"label":243,"color":244},"1b739ab1-e91b-40eb-89d2-dcbeae9ea566","HIGH_EPSS_DELTA","2025-11-22T04:05:11.094294+00:00","Daily EPSS score increased by 0.280 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":246,"version":247},1792284943958,"2.0",{"score":249,"band":250,"action":251,"scoredAt":252},49,"Medium","Plan remediation","2026-10-16T06:56:55.208944+00:00"]