Week in review: VirusTotal data leak, Citrix NetScaler zero-day exploitation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-29298 | Unauthenticated Access Control Bypass in Adobe ColdFusion (Actively Exploited) | 7.5 | 100% | KEV | KEV |
| CVE-2023-34192 | Authenticated XSS in Synacor Zimbra Collaboration Suite 8.8.15 Exploited in the Wild | 9.0 | 77% | KEV | KEV |
CVE-2023-3467+1 related CVE | Privilege Escalation to root administrator (nsroot) | 8.0 group max | 1% | ||
| CVE-2023-3519 | Unauthenticated RCE in Citrix NetScaler ADC and NetScaler Gateway | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-38203 | Unauthenticated Deserialization RCE in Adobe ColdFusion (Actively Exploited) | 9.8 | 97% | KEVRansomware | KEV |
From the original article
4 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Citrix ADC zero-day exploitatation: CISA releases details about attack on CI organization (CVE-2023-3519) The exploitation of the Citrix NetScaler ADC zero-day vulnerability (CVE-2023-3519) was first spotted by a critical infrastructure organization, who reported it to the Cybersecurity and Infrastructure Security…
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.