CVE-2023-38965

Summary

CVE-2023-38965 is a newly disclosed vulnerability affecting the Lost and Found Information System version 1.0. This issue allows unauthorized account takeover through a specific URI (/classes/Users.php?f=save) by using a valid username and password. Successful exploitation grants attackers access to user accounts, potentially leading to data theft or unauthorized system modifications. The vulnerability is due to insufficient input validation in the affected application. It is recommended that users update their systems to the latest version or implement workarounds provided by the vendor to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.