CVE-2023-45672

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Oct 30, 2023
Updated: Dec 13, 2023
CWE ID 502

Summary

CVE-2023-45672 is a high-severity vulnerability affecting Frigate, an open-source network video recorder. Versions prior to 0.13.0 Beta 3 are susceptible to an unsafe deserialization flaw in the endpoints used for saving configurations, potentially leading to unauthenticated remote code execution. Exploiting this vulnerability requires the attacker to have specific knowledge about a user's Frigate server and trick an authenticated user into clicking a specially crafted link. The attacker must also know the address of the user's Frigate instance and find a way to get the user to visit their specialized page and click on the button/link. The potential danger lies in unauthorized access and control over Frigate instances, which could compromise confidentiality, integrity, and availability of data. Remediation involves updating Frigate to version 0.13.0 Beta 3 or newer.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-45672 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options