CVE-2023-25054

Summary

CVE-2023-25054 is a Code Injection vulnerability affecting RSVPMaker from versions n/a through 10.6.6. The issue arises due to improper controls during code generation, which may allow an attacker to inject malicious code into the application. This vulnerability poses a significant risk to systems running the affected version of RSVPMaker, potentially leading to unauthorized access or system compromise. Users are strongly encouraged to update to a secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.