CVE-2023-2868

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2023-05-26

Reference

https://nvd.nist.gov/vuln/detail/CVE-2023-2868

⚡ RCE ◐ zero-day ⌖ exploited in the wild shame 65/100 rceexploited-in-wildzero-day

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

Players implicated

Barracuda Networks · vendor Email Security Gateway (ESG) Appliance · product

Description

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.