CVE-2023-48389
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-48389 is a newly discovered vulnerability affecting Multisuns EasyLog web+. This issue allows unauthenticated remote attackers to bypass authentication and download arbitrary system files through a path traversal vulnerability located within a specific URL parameter. By manipulating the input of this URL, an attacker can traverse beyond intended directories, potentially gaining access to sensitive information or executing malicious code. This vulnerability poses a serious risk to systems running Multisuns EasyLog web+ and requires immediate attention from administrators to apply available patches or workarounds.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions