CVE-2023-25948
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jul 13, 2023
Updated: Apr 22, 2024
CWE ID 394
CWE ID 209
Summary
CVE-2023-25948 is a newly discovered vulnerability that allows for server information leaks. This issue arises when an error response is generated in response to a specially crafted message. The error exposes configuration data, potentially putting sensitive information at risk. It is strongly recommended that affected systems be upgraded and versioned to address this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share