Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40023
HistoryAug 14, 2023 - 8:15 p.m.

Remote code execution

2023-08-1420:15:00
PRIOn knowledge base
www.prio-n.com
4
yak engine
lfi vulnerability
sensitive data exposure
remote code execution
upgrade
cybersecurity
server behavior monitoring
version 1.2.4-sp1

0.002 Low

EPSS

Percentile

54.5%

yaklang is a programming language designed for cybersecurity. The Yak Engine has been found to contain a local file inclusion (LFI) vulnerability. This vulnerability allows attackers to include files from the server’s local file system through the web application. When exploited, this can lead to the unintended exposure of sensitive data, potential remote code execution, or other security breaches. Users utilizing versions of the Yak Engine prior to 1.2.4-sp1 are impacted. This vulnerability has been patched in version 1.2.4-sp1. Users are advised to upgrade. users unable to upgrade may avoid exposing vulnerable versions to untrusted input and to closely monitor any unexpected server behavior until they can upgrade.

0.002 Low

EPSS

Percentile

54.5%

Related for PRION:CVE-2023-40023