CVE-2023-29048

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Jan 8, 2024
Updated: Jan 12, 2024
CWE ID 78

Summary

CVE-2023-29048 is a vulnerability affecting a component used for parsing OXMF templates. Malicious users or attackers can exploit this weakness to execute arbitrary system commands with limited privilege. Unauthorized access to confidential information and potential resource modifications are potential consequences. The template engine has been updated to prevent harmful commands from running system-wide. No publicly available exploits have been reported.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share