CVE-2023-41290

Summary

CVE-2023-41290 is a newly disclosed vulnerability affecting QuFirewall. This issue is classified as a path traversal vulnerability, which can enable authenticated administrators to access files outside of the intended directory. By manipulating file paths, attackers could potentially read sensitive data, posing a security risk via a network. The vulnerability has been addressed in QuFirewall version 2.4.1, released on 2024/02/01. All users are strongly encouraged to update their software to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.