CVE-2023-48193

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Nov 28, 2023
Updated: Dec 4, 2023

Summary

CVE-2023-48193 is an Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0, which allows a remote attacker to execute arbitrary code by bypassing the command filtering function. The vulnerability has a base severity rating of CRITICAL with a base score of 9.8, indicating its high impact on confidentiality, integrity, and availability. The affected product is trfa1J, and there have been 100 reported hits so far. The exploitability score is 3.9, and the attack vector is through the network with no privileges required and no user interaction needed. To remediate this vulnerability, it is essential to update JumpServer to a secure version or apply patches provided by the vendor to mitigate the potential danger it poses to organizations' systems and data.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-48193 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options