CVE-2023-34878

Summary

CVE-2023-34878 refers to a vulnerability in Ujcms v6.0.2 that enables attackers to obtain sensitive information. By exploiting the dir parameter in the /api/backend/core/web-file-html/download-zip endpoint, unauthorized users can access sensitive files. This issue poses a serious risk, as it allows attackers to gain insights into the internal workings of affected systems, potentially leading to further attacks. System administrators are urged to update their Ujcms installations as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.