CVE-2023-45672
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-45672 is a high-severity vulnerability affecting Frigate, an open-source network video recorder. Versions prior to 0.13.0 Beta 3 are susceptible to an unsafe deserialization flaw in the endpoints used for saving configurations, potentially leading to unauthenticated remote code execution. Exploiting this vulnerability requires the attacker to have specific knowledge about a user's Frigate server and trick an authenticated user into clicking a specially crafted link. The attacker must also know the address of the user's Frigate instance and find a way to get the user to visit their specialized page and click on the button/link. The potential danger lies in unauthorized access and control over Frigate instances, which could compromise confidentiality, integrity, and availability of data. Remediation involves updating Frigate to version 0.13.0 Beta 3 or newer.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions