CVE-2023-41708

Summary

CVE-2023-41708 is a new vulnerability that allows attackers to manipulate references to the "app loader" functionality, potentially redirecting them to unexpected locations. This could enable unauthorized injection of malicious script code, bypassing existing safeguards. The vulnerability stems from loose controls on app references, which have now been tightened to prevent relative references. No publicly disclosed exploits exist as of yet, but it is recommended to promptly deploy the available updates and patch releases to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.