PT-2023-27070 · Unknown · Sollace Unicopia

Apple502J · Publicado 2023-10-19 · Atualizado 2023-10-26 · CVE-2023-39680

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sollace Unicopia versions 1.1.1 and before

Description The issue allows attackers to execute arbitrary code due to the deserialization of untrusted data.

Recommendations For versions 1.1.1 and before, update to a version that does not deserialize untrusted data to prevent arbitrary code execution. As a temporary workaround, consider restricting the input data to trusted sources until a patch is available.

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2023-39680

Produtos afetados

Sollace Unicopia

Referências · 5

• https://twitter.com/CVEnew/status/1715256356247077323 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-39680 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-39680 · Nota de Segurança
• https://gist.github.com/apple502j/4ab77291c98e45f4a5bf780c8eda8afa · Nota
• https://t.me/cibsecurity/72664 · Publicação no Telegram