CVE-2023-39013

CriticalCVSS 9.8

Published: 28/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.75%

50th percentile - higher than 50% of all known CVEs

Summary

Duke v1.2 and below was found to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init.

Risk Assessment

This vulnerability could allow attackers to inject malicious code, potentially leading to unauthorized access or execution of harmful operations within the system.

Recommendation

It is recommended to upgrade to the latest version of Duke to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

Duke v1.2 and below was discovered to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init.