CVE-2023-28990

Summary

CVE-2023-28990 is a vulnerability affecting HashThemes Viral Mag, where missing authorization allows unauthorized access. The issue stems from incorrectly configured access control security levels in Viral Mag versions from n/a through 1.0.9. An attacker can exploit this vulnerability to gain unauthorized access, potentially resulting in data breaches or unintended modifications. This flaw underscores the importance of implementing proper access control measures to secure digital platforms.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.