MediumVulnerability
CVE-2023-28312: Azure Machine Learning Information Disclosure Vulnerability
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2023-28312
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 1.5%
Summary
CVE-2023-28312 is an information disclosure vulnerability in Azure Machine Learning, published by Microsoft Corporation to NVD on 04/11/2023 and last modified on 11/21/2024. NVD classifies it under CWE-284 (Improper Access Control), with the CWE-ID noted as NVD-CWE-noinfo, and NVD has not yet provided an assessment. The source text does not describe how the flaw is reached or what an attacker can obtain.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- HighCVE-2026-108456 Azure AI Foundry Elevation of Privilege VulnerabilitySame vendor · MSRC Security Update Guide
- HighGHSA-h4xc-3qfq-jf93: Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpointSame vendor · GitHub Advisory Database
- LowGHSA-6gw6-rv2g-25mg: Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsSame vendor · GitHub Advisory Database
- MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database
- HighCVE-2026-85887: M365 Copilot incorrect permission assignment allows information disclosureSame vendor · NVD/CVE Database