CVE-2023-42017

Summary

CVE-2023-42017 is a vulnerability affecting IBM Planning Analytics Local 2.0. The issue arises from the software's failure to adequately validate file extensions in HTTP requests. An attacker can exploit this weakness by sending a crafted request to upload malicious scripts, potentially granting the attacker the ability to execute arbitrary code on the susceptible system. IBM's X-Force has assigned ID 265567 to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.