CVE-2023-46277

Summary

CVE-2023-46277 is a vulnerability affecting please (aka pleaser) versions up to 0.5.4. An attacker can exploit this issue by using the TIOCSTI and/or TIOCLINUX ioctl to escalate privileges. However, if both TIOCSTI and TIOCLINUX are disabled, the vulnerability cannot be exploited. This privilege escalation weakness poses a significant risk to systems running the affected version of please.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.