CVE-2023-50887
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Summary
CVE-2023-50887 is a Missing Authorization vulnerability affecting UserFeedback, a component of the User Feedback software. The flaw allows unauthorized access due to incorrectly configured access control security levels. This issue poses a risk to User Feedback versions 1.0.1 and earlier. Attackers can exploit this vulnerability to gain unauthorized access to sensitive user information, potential leading to data breaches or system compromise. Organizations using the User Feedback software are advised to update to the latest version or implement appropriate access control measures as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.