CVE-2023-51642

Summary

CVE-2023-51642 is a remote code execution vulnerability affecting Allegra's loadFieldMatch deserialization function. The flaw arises due to insufficient validation of user-supplied data, enabling attackers to deserialize untrusted data and execute arbitrary code. Authentication is required to exploit this vulnerability, but a registration mechanism exists that can be exploited to create a privileged user. The specific issue was identified as ZDI-CAN-22506. This vulnerability can allow an attacker to execute code in the context of the LOCAL SERVICE.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.