CVE-2023-48389

Summary

CVE-2023-48389 is a newly discovered vulnerability affecting Multisuns EasyLog web+. This issue allows unauthenticated remote attackers to bypass authentication and download arbitrary system files through a path traversal vulnerability located within a specific URL parameter. By manipulating the input of this URL, an attacker can traverse beyond intended directories, potentially gaining access to sensitive information or executing malicious code. This vulnerability poses a serious risk to systems running Multisuns EasyLog web+ and requires immediate attention from administrators to apply available patches or workarounds.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.