CVE-2023-6899

Summary

CVE-2023-6899 is a newly disclosed vulnerability affecting the rmountjoy92 DashMachine 0.5-4. The issue lies within the Config Handler component and its /settings/save_config file. Manipulation of the argument value_template enables code injection, making the exploit publicly known and potentially dangerous. This vulnerability, identified as VDB-248257, can pose significant risks if not addressed promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.