CVE-2023-47619
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Dec 13, 2023
Updated: Dec 19, 2023
CWE ID 918
CWE ID 200
Summary
CVE-2023-47619 is a vulnerability affecting Audiobookshelf, a self-hosted audiobook and podcast server. In versions 2.4.3 and earlier, users with update permissions can exploit the flaw to read arbitrary files, delete files, and send GET requests to any URL, reading the response. This issue poses a significant Information Disclosure risk, with no patches currently available to mitigate the vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.