ZDI-23-1209: (0Day) LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability
Published Aug 24, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
LG Simple Editor
Event History
Aug 24, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
May 3, 2024
Advisory Published
via ZDI·02:23 AM
Frequently Asked Questions
1
What is the severity of ZDI-23-1209?
The severity of ZDI-23-1209 is high due to the ability for remote code execution without authentication.
2
How do I fix ZDI-23-1209?
To fix ZDI-23-1209, update LG Simple Editor to the latest version that addresses this vulnerability.
3
Who can be affected by ZDI-23-1209?
Any installation of LG Simple Editor is potentially affected by ZDI-23-1209, especially if exposed to the internet.
4
What type of vulnerability is ZDI-23-1209?
ZDI-23-1209 is a remote code execution vulnerability that allows attackers to execute arbitrary code.
5
Is authentication required to exploit ZDI-23-1209?
No, authentication is not required to exploit ZDI-23-1209, making it even more dangerous.