CVE-2023-33831

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Sep 18, 2023
Updated: Sep 19, 2023
CWE ID 77

Summary

CVE-2023-33831 is a remote command execution (RCE) vulnerability affecting the /api/runscript endpoint of FUXA version 1.1.13. An attacker can exploit this flaw by sending a maliciously crafted POST request to execute arbitrary commands on the targeted system, posing a significant security risk. Successful exploitation could lead to unauthorized system access, data theft, or even complete system takeover. Users are urged to update their FUXA installation as soon as possible to mitigate this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share