CVE-2023-44824

Summary

CVE-2023-44824 is a vulnerability that affects the Expense Management System v.1.0. It allows a local attacker to execute arbitrary code by uploading a crafted file to the sign-up.php component. The risk score for this vulnerability is 25, indicating a high severity level. The base severity is also rated as high, with a base score of 7.8. The privileges required for exploitation are low, and there is no user interaction required. The attack vector is local, and both the confidentiality and integrity impacts are rated as high. This vulnerability poses a significant danger to organizations using the Expense Management System v.1.0, as it can lead to unauthorized code execution and potential compromise of sensitive data. To remediate this vulnerability, it is recommended to apply any available patches or updates provided by the vendor to address this issue promptly. (Note: This report has been generated based on the provided information without any external sources.)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.