CVE-2023-1712

Deepset Haystack ≤ 2023-03-29

Public PoC

Published

30 March 2023

Modified

21 November 2024

Patch / advisory

View advisory

CVSS Score v3.1 9.8

Click a component to see what it means

Raw vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score 0.0085 57th percentile

Risk Priority 73 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-1712 is a critical-severity Use of Hard-coded, Security-relevant Constants (CWE-547) vulnerability in Deepset Haystack. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique OS Credential Dumping (T1003); ranked in the top 43% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

This vulnerability is AI-related — categorised as NLP and Transformers.

OWASP Top 10 for Web (2025)

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2023-1129

Vulnerability Data

Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30.

CWE(s): CWE-547

AI Security AnalysisAI

AI Category: NLP and Transformers
Risk Domain: N/A
OWASP Top 10 for LLMs 2025: None mapped
Classification Reason: Matched keywords: ai

Related Threats

MITRE ATT&CK Enterprise Techniques

T1003 OS Credential Dumping Credential Access

Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password.

attack.mitre.org →

T1003.002 Security Account Manager Credential Access

Adversaries may attempt to extract credential material from the Security Account Manager (SAM) database either through in-memory techniques or through the Windows Registry where the SAM database is stored.

attack.mitre.org →

T1003.003 NTDS Credential Access

Adversaries may attempt to access or create a copy of the Active Directory domain database in order to steal credential information, as well as obtain other information about domain members such as devices, users, and access rights.

attack.mitre.org →

T1003.006 DCSync Credential Access

Adversaries may attempt to access credentials and other sensitive information by abusing a Windows Domain Controller's application programming interface (API)(Citation: Microsoft DRSR Dec 2017) (Citation: Microsoft GetNCCChanges) (Citati…

attack.mitre.org →

T1005 Data from Local System Collection

Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration.

attack.mitre.org →

T1006 Direct Volume Access Stealth

Adversaries may directly access a volume to bypass file access controls and file system monitoring.

attack.mitre.org →

Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2024-32021Shared CWE-547

CVE-2025-2081Shared CWE-547

CVE-2024-39888Shared CWE-547

CVE-2024-41885Shared CWE-547

CVE-2025-49151Shared CWE-547

CVE-2025-23253Shared CWE-547

CVE-2025-2079Shared CWE-547

CVE-2026-28256Shared CWE-547

CVE-2025-30206Shared CWE-547

Affected Assets

deepset

haystack

≤ 2023-03-29

Mitigating Controls

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 partial match

blocks

Secure SDLC practices directly enforce use of named constants and configurable values for security parameters.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.25 Secure development life cycle partial match

blocks

Secure SDLC processes can catch hard-coded constants during reviews and testing.

A.8.26 Application security requirements partial match

removes

A.8.27 Secure system architecture and engineering principles partial match

removes

A.8.28 Secure coding partial match

prevents

Secure coding standards explicitly prohibit hard-coded security constants.

A.8.8 Management of technical vulnerabilities partial match

removes