CVE-2023-37790

Summary

CVE-2023-37790: A significant vulnerability was identified in Jaspersoft Clarity PPM version 14.3.0.298. This issue allows attackers to upload arbitrary files through the Profile Picture Upload function, potentially leading to serious security consequences. Unauthorized code execution or data exposure are potential risks associated with this vulnerability. System administrators are strongly encouraged to apply the necessary patches as soon as possible to mitigate these threats. Users should avoid uploading files from untrusted sources until the vulnerability has been addressed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.