CVE-2023-39584

Summary

CVE-2023-39584 is a newly disclosed vulnerability affecting the blogging platform Hexo up to version 7.0.0 (RC2). This issue grants attackers the ability to read arbitrary files on the affected system, posing a significant risk to data confidentiality. An attacker can exploit this vulnerability by sending a maliciously crafted request to the server, allowing them to access sensitive files without proper authorization. The exact cause of this vulnerability is still under investigation, but users are strongly advised to update to the latest version of Hexo as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.