CVE-2023-3308
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
A vulnerability CVE-2023-3308 has been identified in version 1.1.8 of the Aviator Template Engine in whaleal IceFrog. Manipulation of an unknown function leads to deserialization, which may be exploited by attackers.
Risk Assessment
The risk associated with this vulnerability is the potential for unauthorized users to exploit deserialization, leading to serious security breaches.
Recommendation
It is recommended to update to the latest version of the Aviator engine and monitor the system for unauthorized activities.
Original NVD description (English source)
A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231804.