CVE-2023-2621

Summary

CVE-2023-2621 is a vulnerability affecting the McFeeder server component of the SSW package. The issue arises due to the server's use of an outdated third-party library for archive extraction. This weakness allows authenticated clients to manipulate ZIP archives and perform arbitrary file writes on the target system by uploading specially crafted archives through the network.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.