CVE-2023-31867

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Jun 22, 2023
Updated: Jun 28, 2023
CWE ID 1236

Summary

CVE-2023-31867 refers to a vulnerability affecting Sage X3 version 12.14.0.50-0. This issue allows an attacker to inject malicious CSV (Comma Separated Values) data into the system, potentially leading to unintended execution of code or data access. This can result in significant security implications, including unauthorized system access or data manipulation. The exploitation of this vulnerability could occur through importing or exporting CSV files, making it essential for organizations using this version of Sage X3 to apply the necessary patches promptly to protect themselves.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Sage Business Cloud Enterprise Management

Affected Vendors

  • Sage Group