CVE-2023-25948

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jul 13, 2023
Updated: Apr 22, 2024
CWE ID 394
CWE ID 209

Summary

CVE-2023-25948 is a newly discovered vulnerability that allows for server information leaks. This issue arises when an error response is generated in response to a specially crafted message. The error exposes configuration data, potentially putting sensitive information at risk. It is strongly recommended that affected systems be upgraded and versioned to address this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share