CVE-2023-52333

Summary

CVE-2023-52333 is a Directory Traversal Remote Code Execution vulnerability affecting Allegra software. This issue enables remote attackers to execute arbitrary code on affected installations, despite requiring authentication. The product's registration mechanism can be exploited to create a user with the necessary privileges. The saveFile method is the source of the vulnerability, as it fails to properly validate user-supplied paths before employing them in file operations. The exploitation leads to code execution in the context of the LOCAL SERVICE. (ZDI-CAN-22548)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.