CVE-2023-27433
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-27433 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Make Paths Relative component of YAS Global, specifically versions from n/a to 1.3.0. An attacker can exploit this issue to manipulate user actions on the targeted website, performing unauthorized actions on behalf of the victim. This could potentially lead to sensitive data disclosure, account takeover, or other malicious activities. A successful attack requires the attacker to trick the user into clicking a malicious link or visiting a compromised website, making CSRF a significant threat for websites that do not adequately protect against such attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions