CVE-2023-52289

Summary

CVE-2023-52289 is a newly identified vulnerability affecting the flaskcode package up to version 0.0.8 for Python. This issue permits unauthenticated attackers to perform a directory traversal through a POST request to the /update-resource-data/<file_path> URI in views.py. Exploitation of this vulnerability enables attackers to write arbitrary files on the targeted system, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.