CVE-2023-4849

Summary

CVE-2023-4849 is a critical vulnerability affecting IBOS OA 4.5.5. An unknown functionality in the file ?r=file/dashboard/trash&op=del is the target of this issue. Manipulation of the argument 'fids' allows for sql injection, enabling attackers to launch remote attacks. The exploit for this vulnerability, identified as VDB-239258, has been disclosed to the public, increasing the risk of its exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.