CVE-2023-5445

Summary

CVE-2023-5445 is a newly discovered open redirect vulnerability affecting ePolicy Orchestrator versions prior to 5.10.0 CP1 Update 2. This issue enables a remote, low-privileged user to manipulate URL parameters and redirect URL requests to malicious sites through the dashboard area of the user interface. For the exploitation, an attacker must change the HTTP payload during post submission before it reaches the ePO server. This vulnerability poses a significant risk, allowing potential unauthorized access and data theft. Users are strongly advised to update their ePO instances as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.