CVE-2023-39446

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Sep 18, 2023
Updated: Aug 2, 2024
CWE ID 352

Summary

CVE-2023-39446 is a vulnerability affecting user management in certain web applications. By exploiting this weakness, an attacker can obtain header information to craft malicious URLs and initiate harmful actions while a legitimate user is logged in. This issue poses a significant risk to user privacy and data security. The vulnerability allows an unauthorized user to gain unintended access to sensitive information or perform unauthorized actions. It is crucial that affected organizations apply the necessary patches or updates to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share