SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro
Mendix Studio Pro is vulnerable to an out of bounds write vulnerability in the integrated libwebp library (CVE-2023-4863), that could allow an attacker to execute code in the context of a victim user's system. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-4863US | high8.8OT critical | KEV | ||
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML pag… | ||||
references
External citations — patches, advisories, analysis.
- SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro - CSAF Versionself
- SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro - HTML Versionself
- SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro - PDF Versionself
- SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro - TXT Versionself
remediations (4)
- FixedMendix Studio Pro 10
Update to V10.3.1 or later version
https://docs.mendix.com/releasenotes/studio-pro/10/ - FixedMendix Studio Pro 7
Update to V7.23.37 or later version
https://docs.mendix.com/releasenotes/studio-pro/7/ - FixedMendix Studio Pro 8
Update to V8.18.27 or later version
https://docs.mendix.com/releasenotes/studio-pro/8/ - FixedMendix Studio Pro 9
Update to V9.24.0 or later version
https://docs.mendix.com/releasenotes/studio-pro/9/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan