Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-6562
HistoryDec 20, 2023 - 1:15 p.m.

Design/Logic Flaw

2023-12-2013:15:00
PRIOn knowledge base
www.prio-n.com
3
design flaw
logic flaw
vulnerability
exfiltration
server
upload
image
remote files
local files
kakadu 7.9
nvd

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.9%

JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if the server allows the attacker to upload a specially-crafted the image that is displayed back to the attacker.

CPENameOperatorVersion
kakadu_sdkge4.4
kakadu_sdkle8.4

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.9%

Related for PRION:CVE-2023-6562