CVE-2023-5921 - Vulnerability Details - OpenCVE

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.

This issue affects Geodi: before 8.0.0.27396.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00017.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

DECE Software

Geodi

unaffected

Version	Status	Constraints
`0`	affected	< 8.0.0.27396

Configuration 1 [-]

cpe:2.3:a:decesoftware:geodi:*:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors	Products
Decesoftware Subscribe	Geodi Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2023-58193	Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.This issue affects Geodi: before 8.0.0.27396.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0650
https://www.usom.gov.tr/bildirim/tr-23-0650

History

Wed, 20 May 2026 14:15:00 +0000

Type	Values Removed	Values Added
Description	Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.This issue affects Geodi: before 8.0.0.27396.	Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issue affects Geodi: before 8.0.0.27396.
References		https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0650

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2023-11-22T09:03:14.924Z

Updated: 2026-05-20T13:55:34.863Z

Reserved: 2023-11-02T12:24:45.181Z

Link: CVE-2023-5921

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-11-22T09:15:07.690

Modified: 2026-05-20T14:16:34.333

Link: CVE-2023-5921

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-841

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-5921", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2023-11-02T12:24:45.181Z", "datePublished": "2023-11-22T09:03:14.924Z", "dateUpdated": "2026-05-20T13:55:34.863Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-05-20T13:55:34.863Z"}, "title": "Function Bypass in Geodi", "datePublic": "2023-11-22T09:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-841", "description": "CWE-841 Improper Enforcement of Behavioral Workflow", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-554", "descriptions": [{"lang": "en", "value": "CAPEC-554 Functionality Bypass"}]}], "affected": [{"vendor": "DECE Software", "product": "Geodi", "versions": [{"status": "affected", "version": "0", "lessThan": "8.0.0.27396", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.\n\nThis issue affects Geodi: before 8.0.0.27396.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.<p>This issue affects Geodi: before 8.0.0.27396.</p>"}]}], "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-23-0650", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0650", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"}}], "credits": [{"lang": "en", "value": "Serhat YAPICI", "user": "00000000-0000-4000-9000-000000000000", "type": "finder"}], "source": {"defect": ["TR-23-0650"], "advisory": "TR-23-0650", "discovery": "USER"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T08:14:24.979Z"}, "title": "CVE Program Container", "references": [{"tags": ["government-resource", "x_transferred"], "url": "https://www.usom.gov.tr/bildirim/tr-23-0650"}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:decesoftware:geodi:*:*:*:*:*:*:*:*", "matchCriteriaId": "67D33BAA-FCF4-412B-A8FF-7E62F7D5A13A", "versionEndExcluding": "8.0.0.27396", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.\n\nThis issue affects Geodi: before 8.0.0.27396."}, {"lang": "es", "value": "La aplicaci\u00f3n inadecuada de la vulnerabilidad del flujo de trabajo conductual en el software DECE Geodi permite la omisi\u00f3n de funcionalidad. Este problema afecta a Geodi: antes de 8.0.0.27396."}], "id": "CVE-2023-5921", "lastModified": "2026-05-20T14:16:34.333", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "iletisim@usom.gov.tr", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Secondary"}]}, "published": "2023-11-22T09:15:07.690", "references": [{"source": "iletisim@usom.gov.tr", "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0650"}, {"source": "iletisim@usom.gov.tr", "tags": ["Third Party Advisory"], "url": "https://www.usom.gov.tr/bildirim/tr-23-0650"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.usom.gov.tr/bildirim/tr-23-0650"}], "sourceIdentifier": "iletisim@usom.gov.tr", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-841"}], "source": "iletisim@usom.gov.tr", "type": "Secondary"}]}