CVE-2023-43270

Summary

CVE-2023-43270 is a newly identified remote command execution (RCE) vulnerability affecting version 1.5.0 of dst-admin. This issue can be exploited by sending a maliciously crafted userId parameter to the /home/playerOperate endpoint. Successful exploitation allows an attacker to execute arbitrary commands on the affected system with the privileges of the targeted user. This vulnerability poses a serious security risk and requires immediate remediation by updating to a patched version of dst-admin.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.