VULNERABILITY INTELLIGENCE

CVE-2023-34209

CVSS score5 MEDIUM
EPSS probability0.57%
CISA KEVNot currently listed
Published2023-10-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to obtain the absolute path via unencrypted VIEWSTATE parameter.

Weakness classification

  • ART@zuso.ai: CWE-497
  • nvd@nist.gov: NVD-CWE-Other

Primary references