PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

NextGen Mirth Connect Remote Code Execution Vulnerability (CVE-2023-43208)

horizon3.ai | vulnerability | CVE-2023-43208 | #rce | #vulnerability-research | #horizon3 | #mirth-connect | #cve-2023-43208
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Mirth Connect, by NextGen HealthCare, versions prior to 4.4.1 are vulnerable to an unauthenticated RCE vulnerability, CVE-2023-43208.
CVE
CVE-2023-43208
Published
Collected

Related coverage

vulnerability · horizon3.ai
Writeup for CVE-2023-43208: NextGen Mirth Connect Pre-Auth RCE
Deep dive into CVE-2023-43208: a pre-auth RCE in NextGen Mirth Connect, its root cause, exploitation path, and guidance for defenders.
vulnerability · horizon3.ai
[CVE-2021-41765] Multiple Vulnerabilities in ResourceSpace
Advisory for CVE-2021-41765, a critical SQL injection vulnerability leading to remote code execution, by the Horizon3 red team.
vulnerability · horizon3.ai
[CVE-2020-3952] Compromising vCenter via SAML Certificates
A common attack path that Horizon3 has identified across many of its customers is abusing access to the VMware vCenter Identity Provider (IdP) certificate.
vulnerability · horizon3.ai
[CVE-2021-38647] OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments
# OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments Zach Hanley September 16, 2021 Attack Blogs Overview On September 14, multiple vulnerabilities were discovered by researchers at...
vulnerability · horizon3.ai
Confluence Server OGNL Injection: CVE-2021-26084
On August 25, 2021, Atlassian released a security advisory for CVE-2021-26084, an OGNL injection vulnerability found within a component of Confluence Server and…
vulnerability · horizon3.ai
[CVE-2021-34473] ProxyShell: More Ways for More Shells
In August, Orange Tsai released details and also spoke at BlackHat and DEFCON detailing his security research into Microsoft Exchange. His latest blog post…
Back