CVE-2023-21624
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2023-21624 is a newly disclosed information disclosure vulnerability affecting DSP Services. During the loading of dynamic modules, sensitive information is inadvertently exposed, potentially allowing unauthorized access to critical data. An attacker could exploit this vulnerability by manipulating the dynamic module loading process to gain unintended access to confidential information. The impact of this issue is significant as it may lead to data breaches or unauthorized system access. Organizations utilizing DSP Services are encouraged to apply the available patch or implement workarounds to mitigate the risk of exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.