CVE-2023-25344: Code Injection
Published Mar 15, 2023
·Updated
An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.
Affected Software
2 affected components
Swig-templates Project Swig-templates<=2.0.4
Swig Project Swig<=1.4.2
Event History
Mar 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-25344?
The severity of CVE-2023-25344 is classified as critical with a CVSS score of 9.8.
2
How can I mitigate CVE-2023-25344?
To mitigate CVE-2023-25344, it is recommended to update swig-templates to version 2.0.5 or higher and swig to version 1.4.3 or higher.