ZDI-23-1204: (0Day) LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability
Published Aug 24, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
LG Simple Editor
Event History
Aug 24, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
May 3, 2024
Advisory Published
via ZDI·02:23 AM
Frequently Asked Questions
1
What is the severity of ZDI-23-1204?
ZDI-23-1204 is classified as a critical vulnerability due to its ability to allow remote code execution without authentication.
2
How do I fix ZDI-23-1204?
To fix ZDI-23-1204, update your installation of LG Simple Editor to the latest version provided by LG.
3
Who is affected by ZDI-23-1204?
ZDI-23-1204 affects all installations of LG Simple Editor that have not been patched.
4
Can ZDI-23-1204 be exploited remotely?
Yes, ZDI-23-1204 can be exploited remotely without requiring authentication.
5
What kind of attacks can be performed using ZDI-23-1204?
ZDI-23-1204 allows attackers to execute arbitrary code, potentially leading to system compromise.