CVE-2023-23796

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Nov 7, 2023
Updated: Nov 15, 2023
CWE ID 1236

Summary

CVE-2023-23796 is a vulnerability affecting Muneeb Form Builder, a tool used to create responsive contact forms. The weakness lies in the improper neutralization of formula elements in a CSV file. An attacker can exploit this vulnerability by injecting malicious formulas into the CSV file, potentially leading to unintended execution of arbitrary code. This issue poses a significant risk to all users of Form Builder from versions n/a through 1.9.9.0.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share