CVE-2023-34738
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jun 29, 2023
Updated: Jul 6, 2023
CWE ID 434
Summary
CVE-2023-34738 is a newly identified vulnerability affecting Chemex versions up to 3.7.1. An attacker can exploit this flaw to upload arbitrary files, potentially gaining unauthorized access to sensitive data or systems. This vulnerability poses a significant risk, especially in environments where user input is not adequately sanitized. To mitigate this threat, it is strongly recommended that users upgrade to the latest stable version of Chemex as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share