CVE-2024-23055

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Jan 25, 2024
Updated: Feb 2, 2024

Summary

CVE-2024-23055 is a newly disclosed vulnerability affecting Plone Docker Official Image 5.2.13. This issue enables remote code execution, which can be exploited by malicious actors. The vulnerability stems from a flaw in the input validation process of the HOST headers in this open-source software. By exploiting this weakness, attackers can inject malicious code into the system, potentially leading to serious security risks and compromises. It is strongly recommended that users of Plone Docker Official Image 5.2.13 upgrade to a patched version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share