CVE-2023-51928

Summary

CVE-2023-51928 is a newly identified vulnerability affecting YonBIP version 3_23.05. This issue involves an arbitrary file upload vulnerability located in the ArcpUploadAction.doAction() method of the nccloud.web application. By exploiting this flaw, attackers can upload specially crafted files that allow for the execution of arbitrary code, posing a significant risk to affected systems. Successful exploitation could result in unauthorized access, data theft, or system compromise. Organizations using YonBIP are recommended to apply the necessary patches or updates as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.