CVE-2023-46754

Summary

CVE-2023-46754 is a vulnerability affecting the admin panel of Obl.ong before version 1.1.2. This issue allows bypassing authorization checks, as the email One-Time Password (OTP) feature accepts arbitrary numerical values instead of verifying the authenticity of the code sent to the email address. An unauthorized user who gains access to the admin panel through this vulnerability can manipulate the system and potentially gain unintended access to sensitive information or perform unauthorized actions. This security flaw poses a significant risk for organizations using Obl.ong and emphasizes the importance of keeping software up to date to mitigate such vulnerabilities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.