CVE-2023-34624

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jun 14, 2023
Updated: Aug 8, 2023
CWE ID 787

Summary

CVE-2023-34624 is a newly discovered vulnerability in the htmlcleaner library before version 2.28. Attackers can exploit this issue by introducing cyclic dependencies in crafted objects, leading to unspecified impacts including a denial of service. The exact nature of these impacts is yet to be determined, but the vulnerability poses a potential risk to applications using the affected library. Users are advised to update to the latest version of htmlcleaner to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share