ZDI-CAN-19925: ZDI-23-1204: (0Day) LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability
Published Aug 24, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
LG Simple Editor
Event History
Aug 24, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
May 3, 2024
Advisory Published
via ZDI·02:23 AM
Frequently Asked Questions
1
What is the severity of ZDI-CAN-19925?
The severity of ZDI-CAN-19925 is critically high due to its potential for remote code execution.
2
How do I fix ZDI-CAN-19925?
To fix ZDI-CAN-19925, update LG Simple Editor to the latest version provided by the vendor.
3
How does ZDI-CAN-19925 affect LG Simple Editor?
ZDI-CAN-19925 allows remote attackers to execute arbitrary code on affected installations without requiring authentication.
4
Is authentication required to exploit ZDI-CAN-19925?
No, authentication is not required to exploit ZDI-CAN-19925.
5
What are the potential impacts of ZDI-CAN-19925?
The potential impacts of ZDI-CAN-19925 include full system compromise and unauthorized access to sensitive data.