CVE-2023-3001

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Jun 14, 2023
Updated: Jun 21, 2023
CWE ID 918

Summary

CVE-2023-3001 is a newly discovered vulnerability affecting the Dashboard module. This issue is classified as a CWE-502: Deserialization of Untrusted Data vulnerability. An attacker can exploit this flaw by sending a malicious file that, upon being opened by the user, could lead to the interpretation of malicious payload data, potentially resulting in remote code execution.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share