CVE-2023-37481

Summary

CVE-2023-37481 is a Denial of Service (DoS) vulnerability affecting versions 2.11.0 through 2.15.1 of the Fides open-source privacy engineering platform. The vulnerability allows attackers with elevated privileges, including root users and users with the owner role, to upload malicious SVG files in zip format that cause resource exhaustion in Admin UI browser tabs. This results in a persistent denial of service of the 'new connector' page. The vulnerability has been patched in Fides version 2.16.0, and users are advised to upgrade to secure their systems. There is currently no known workaround to remediate the vulnerability without upgrading.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.