CVE-2023-4168: Adlisting Classified Ads 2.14.0 - Information Disclosure

HoneyLabs honeypots recorded 32 probes matching CVE-2023-4168 from 4 distinct source IP addresses in the last 7 days, of which 12 on interactive sensors. Severity is rated high.

4 sources probed for CVE-2023-4168 on the interactive sensors. None of them sent the exploit payload.

What the sensors show

Probes arrived on every day of the 7-day window. The busiest day was 2026-11-06, with 12. One address, 172.236.28.161, sent 38% of them. Over the last 90 days the sensors recorded 412 probes for it. Every probing client that negotiated TLS presented one JA4 fingerprint, t13i251000_b78ed14e2fd0_ab7e3b40a677.

Request paths that identify it

  • /ad-list-search

Addresses probing it

Source IPProbesNetworkCountry
172.236.28.16112Akamai Connected CloudUnited Kingdom
97.107.138.2109Akamai Connected CloudUnited States
50.116.58.2537Akamai Connected CloudUnited States
172.105.109.854Akamai Connected CloudCanada

Networks it comes from

ASNOrganisationProbesSource IPs
AS63949Akamai Connected Cloud324

Where it comes from

CountryProbes
United States16
United Kingdom12
Canada4

Captured requests

  • /ad-list-search?keyword&keyword&lat&lat&long&long&location&category

Requests the interactive sensors answered

  • GET /ad-list-search?keyword&keyword&lat&lat&long&long&location&category

HTTP client fingerprints

  • b11cun050_0004001e_00ecc3a8

CVE report

Open a specific CVE from the CVE tracker.