CVE-2023-48387

TAIWAN-CATWCA JCICSecurityTool fails to check the source website and access locations when executing multiple Registry-related functions. In the scenario where a user is using the JCICSecurityTool and has completed identity verification, if the user browses a malicious webpage created by an...

CVE-2023-48387

CVE-2023-48387 affects the JCICSecurityTool from Taiwan-CA (TWCA). The vulnerability arises when the tool executes multiple Registry-related functions without proper checks of the source website/locations. After a user has completed identity verification, visiting a malicious webpage can allow an...