CVE-2023-46253

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Nov 7, 2023
Updated: Nov 15, 2023
CWE ID 22

Summary

CVE-2023-46253 is an arbitrary file write vulnerability affecting Squidex, an open source headless CMS and content management hub. This vulnerability allows an authenticated attacker with the squidex.admin.restore permission to gain remote code execution (RCE). By exploiting the backup restore feature, the attacker can manipulate the backup zip archive to create a malicious .asset file and execute arbitrary code when the backup is restored. The vulnerability has a high base severity score of 7.2 and poses a significant danger to organizations using Squidex. To remediate this vulnerability, users should update to a patched version of Squidex that addresses the arbitrary file write issue.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-46253 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options