CVE-2023-3001
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data. This may lead to remote code execution when an attacker gets the user to open a malicious file.
Risk Assessment
The organization may be exposed to remote code execution by an attacker, potentially leading to data loss or system takeover.
Recommendation
It is recommended to update the Dashboard module and implement strict controls regarding opening files from untrusted sources.
Original NVD description (English source)
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file.