CVE-2023-52324

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Jan 23, 2024
Updated: Jan 30, 2024
CWE ID 434

Summary

CVE-2023-52324 is an unrestricted file upload vulnerability affecting Trend Micro Apex Central. This issue allows a remote attacker, with valid credentials, to upload arbitrary files onto targeted installations. Potentially, this vulnerability could be exploited in conjunction with another weakness to execute malicious code. Although authentication is necessary to exploit this flaw, its presence poses a significant risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Trend Micro Apex Central

Affected Vendors

  • Trend Micro, Inc.