CVE-2023-52083

Summary

CVE-2023-52083 is a vulnerability affecting the Winter CMS, a free and open-source content management system. Prior to version 1.2.4, this platform allowed users possessing the `media.manage_media` permission to upload files and subsequently rename them. However, before this update, media files were only sanitized upon upload, leaving them susceptible to Stored Cross-Site Scripting (XSS) attacks if an attacker managed to inject malicious code during the renaming process. The issue has been resolved in version 1.2.4.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.