CVE-2023-43208

Severity

critical · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2024-05-20

Reference

https://nvd.nist.gov/vuln/detail/CVE-2023-43208

⚡ RCE ⌖ exploited in the wild shame 95/100 ransomwarerceexploited-in-wild

NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.

Players implicated

NextGen Healthcare · vendor mirth connect · product

Description

NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.