CVE-2023-47370

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 9, 2023
Updated: Nov 20, 2023
CWE ID 326

Summary

CVE-2023-47370 is a vulnerability affecting bluetrick Line 13.6.1, where an access token is inadvertently leaked during the transmission of notifications. This issue grants remote attackers the ability to send malicious notifications to victims, potentially resulting in unauthorized access or data breaches. The vulnerability could lead to serious consequences, including privacy violations or even financial loss. Users are advised to update their systems as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share