External Control of File Name or Path

CVE-2023-29324

Medium

6.5/10

Summary

Windows MSHTML Platform Security Feature Bypass Vulnerability

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: LOW
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: LOW

CWE-73 - External Control of File Name or Path

The software allows user input to control or influence paths or file names that are used in filesystem operations.

References

Advisory Timeline

Published May 09, 2023