CVE-2023-40266

Summary

CVE-2023-40266 is a newly disclosed vulnerability affecting Atos Unify OpenScape Xpressions WebAssistant version prior to V7R1 FR5 HF42 P911. This issue enables an attacker to traverse paths, potentially gaining unauthorized access to sensitive data or system functions. The precise nature of the path traversal is not detailed, but it poses a significant risk to organizations using the affected software. It is strongly recommended that users upgrade to a patched version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.