module

LG Simple Editor Command Injection (CVE-2023-40504)

Disclosed
Aug 4, 2023

Description

Unauthenticated Command Injection in LG Simple Editor The vulnerability can be exploited by a remote attacker to inject arbitrary operating system commands which will get executed in the context of NT AUTHORITY\SYSTEM.
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.