PT-2023-27070 · Unknown · Sollace Unicopia

Apple502J · Published 2023-10-19 · Updated 2023-10-26 · CVE-2023-39680

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sollace Unicopia versions 1.1.1 and before

Description The issue allows attackers to execute arbitrary code due to the deserialization of untrusted data.

Recommendations For versions 1.1.1 and before, update to a version that does not deserialize untrusted data to prevent arbitrary code execution. As a temporary workaround, consider restricting the input data to trusted sources until a patch is available.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2023-39680

Affected Products

Sollace Unicopia

References · 5

• https://osv.dev/vulnerability/CVE-2023-39680 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39680 · Security Note
• https://twitter.com/CVEnew/status/1715256356247077323 · Twitter Post
• https://gist.github.com/apple502j/4ab77291c98e45f4a5bf780c8eda8afa · Note
• https://t.me/cibsecurity/72664 · Telegram Post