PT-2023-27070 · Unknown · Sollace Unicopia

Apple502J · CVE-2023-39680 · Published 2023-10-19 · Updated 2023-10-26

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sollace Unicopia versions 1.1.1 and before

Description The issue allows attackers to execute arbitrary code due to the deserialization of untrusted data.

Recommendations For versions 1.1.1 and before, update to a version that does not deserialize untrusted data to prevent arbitrary code execution. As a temporary workaround, consider restricting the input data to trusted sources until a patch is available.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2023-39680

Affected Products

Sollace Unicopia

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39680.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-39680 · Security Note
• https://osv.dev/vulnerability/CVE-2023-39680 · Vendor Advisory
• https://gist.github.com/apple502j/4ab77291c98e45f4a5bf780c8eda8afa · Note
• https://t.me/cibsecurity/72664 · Telegram Post
• https://twitter.com/CVEnew/status/1715256356247077323 · Twitter Post