Vulnerabilitycritical
Fortinet and PaperCut: Unveiling Critical Vulnerabilities in 2023
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-23529 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER | — | — | ||
| CVE-2022-41328 | Path Traversal in Fortinet FortiOS Exploited in Targeted Attacks | 7.1 | 11% | KEV | KEV |
| CVE-2023-27350 | Authentication Bypass Leading to SYSTEM RCE in PaperCut MF/NG | 9.8 | 100% | KEVRansomwarePoC ×3 | KEV |
| CVE-2023-27524 | Insecure default SECRET_KEY in Apache Superset enables auth bypass and RCE | 9.8 | 98% | KEVPoC ×2 | KEV |
| CVE-2023-28858 | redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an… | 3.7 | 1% |
From the original article
2 min read at infosecurity-magazine.com
A recent report from Rezilion has shed light on some noteworthy vulnerabilities found in the first half of 2023 and provided recommended remediation strategies. The vulnerabilities span various sources, including development processes, open source software and supply chains. One such vulnerability regards Apache Superset (CVE-2023-27524).
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.