Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 8.8 | High | 3.1 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CNA (NI) |
- CISA KEV Not listed.
- EPSS 0.0032, the 24th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
Sources
- GitHub Advisory Database: GHSA-3f48-9j7q-q2gv
- OSV: GHSA-3f48-9j7q-q2gv
- github.com/ni/measurementlink-python/security/advisories/GHSA-3f48-9j7q-q2gv
- nvd.nist.gov/vuln/detail/CVE-2023-4570
- github.com/ni/measurementlink-python/commit/3e9d45147befc9a151fca5582c64fa77c7ba1980
- github.com/ni/measurementlink-python/commit/d2c73b1e0252081e1b89767aa916d73772d04dd9
- github.com/ni/measurementlink-python
- www.ni.com/en/support/documentation/supplemental/23/improper-restriction-in-ni-measurementlink-python-services.html