CVE-2023-45311

Summary

CVE-2023-45311: This vulnerability affects the fsevents library before version 1.2.11. An adversary could potentially exploit this issue by controlling the URL <https://fsevents-binaries.s3-us-west-2.amazonaws.com>, which is used by fsevents. If a JavaScript project, that depends on fsevents, distributes code obtained from this URL at an inappropriate time, an attacker might be able to execute arbitrary code. However, some sources suggest that the vulnerability is no longer a risk, as the URL is no longer under the control of an adversary.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.