CVE-2023-35670

Summary

CVE-2023-35670 is a newly identified vulnerability affecting the computeValuesFromData function in FileUtils.java. This issue involves a path traversal error, enabling an attacker to insert files into other applications' external private directories. With no additional execution privileges required, this vulnerability could potentially lead to local privilege escalation, allowing attackers to gain unauthorized access to sensitive information or perform malicious actions within the affected application. User interaction is not necessary for exploitation, making this a serious concern for security teams.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.