CVE-2023-34204
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published May 30, 2023
Updated: Jan 10, 2025
CWE ID 59
Summary
CVE-2023-34204 is a vulnerability affecting imapsync versions up to 2.229. The issue lies in the software's use of predictable paths in the /tmp and /var/tmp directories, which are typically world-writable. An attacker can exploit this vulnerability by modifying imapsync's cache, potentially overwriting files belonging to the user operating the software. This could lead to unintended data loss or unauthorized access to sensitive information. It is recommended that users update to the latest version of imapsync to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Imapsync Project Imapsync