CVE-2023-29492

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data...

NoviSurvey Insecure Deserialization Vulnerability (CVE-2023-29492)

The version of NoviSurvey installed on the remote host is before 8.9.43676. It is therefore vulnerable to a insecure deserialization vulnerability that can allow remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored...

CVE-2023-29492

creationtimestamp| type| source ---|---|--- 2023-04-14 11:15:26+00:00| seen| MISP/6a1e78c5-1baf-4ae6-8ad7-959df8a51015 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:12+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971799 2025-02-23...

VulnCheck KEV: CVE-2023-29492

Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account...

CVE-2023-29492

Summary (CVE-2023-29492) NoviSurvey before version 8.9.43676 is affected by an insecure deserialization vulnerability. The flaw allows remote attackers to execute arbitrary code on the server in the context of the service account, without accessing stored survey or response data. Concrete details...