CVE-2023-29048
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 8, 2024
Updated: Jan 12, 2024
CWE ID 78
Summary
CVE-2023-29048 is a vulnerability affecting a component used for parsing OXMF templates. Malicious users or attackers can exploit this weakness to execute arbitrary system commands with limited privilege. Unauthorized access to confidential information and potential resource modifications are potential consequences. The template engine has been updated to prevent harmful commands from running system-wide. No publicly available exploits have been reported.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- OX App Suite
Affected Vendors
- Open-xchange