CVE-2023-31073

Summary

CVE-2023-31073 is a Missing Authorization vulnerability affecting Display custom fields in the frontend – Post and User ProfileFields of Jose Vega Plugin. This issue arises due to incorrectly configured access control security levels, enabling attackers to exploit the vulnerability. The vulnerability exists in versions from n/a through 1.2.0 and allows unauthorized access to sensitive data or functionality. Successful exploitation could potentially result in data theft or unintended modifications. Users are advised to update to the latest plugin version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.