CVE Catalog
CVE-2023-34634
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk7.69%
94th percentile - higher than 94% of all known CVEs
Summary
Greenshot version 1.2.10 and below allows arbitrary code execution due to insecure deserialization of .NET content when a .greenshot file is opened.
Risk Assessment
Exploitation of this vulnerability could lead to remote code execution, posing a serious security threat to the organization's systems.
Recommendation
It is recommended to update Greenshot to the latest version to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.

