CVE-2023-39023

Summary

CVE-2023-39023 is a code injection vulnerability affecting university compass versions 2.2.0 and below. The issue lies within the org.compass.core.executor.DefaultExecutorManager.configure component, where an unchecked argument can be exploited. This vulnerability poses a significant risk, allowing attackers to inject malicious code and potentially gain unauthorized access to the system. System administrators are strongly advised to upgrade to the latest version of university compass to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.