CVE-2023-36255

Summary

CVE-2023-36255 is a newly discovered vulnerability affecting the Eramba Enterprise and Community edition, version 3.19.1. This issue permits a remote attacker to execute arbitrary code by exploiting a vulnerability in the URL's path parameter. By carefully crafting a malicious URL, an attacker can bypass security restrictions and run unauthorized commands, posing a significant risk to the affected system. The vulnerability calls for immediate attention as it could lead to unauthorized access, data breaches, or even system takeover. It is recommended that users upgrade to the latest version of Eramba as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.