SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro
Mendix Studio Pro is vulnerable to an out of bounds write vulnerability in the integrated libwebp library (CVE-2023-4863), that could allow an attacker to execute code in the context of a victim user's system. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-4863US | high8.8OT kritisch | KEV | ||
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML pag… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro - CSAF Versionself
- SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro - HTML Versionself
- SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro - PDF Versionself
- SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro - TXT Versionself
Behebungen (4)
- BehobenMendix Studio Pro 10
Update to V10.3.1 or later version
https://docs.mendix.com/releasenotes/studio-pro/10/ - BehobenMendix Studio Pro 7
Update to V7.23.37 or later version
https://docs.mendix.com/releasenotes/studio-pro/7/ - BehobenMendix Studio Pro 8
Update to V8.18.27 or later version
https://docs.mendix.com/releasenotes/studio-pro/8/ - BehobenMendix Studio Pro 9
Update to V9.24.0 or later version
https://docs.mendix.com/releasenotes/studio-pro/9/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan