CVE-2023-34209

—

CVSS 3.1

4.3 medium

EPSS

<1%p36

Published

Oct 17, 2023 (Oct 17, 2023)

Modified

Jun 17, 2026

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to obtain the absolute path via unencrypted VIEWSTATE parameter.

Vendors: easyuse
Products: mailhunter ultimate
Weakness: CWE-497
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.