CVE-2023-21289

Summary

CVE-2023-21289 is a newly disclosed vulnerability affecting multiple locations. It involves a confused deputy issue, which allows for a bypass of a multi-user security boundary. This vulnerability enables local information disclosure without requiring additional execution privileges, making it a potential security risk. Notably, user interaction is not needed for an attacker to exploit this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.