Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2023-45798

Yettiesoft VestCert Remote Code Execution Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules. This allows malicious actors to load arbitrary third-party modules, leading to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Yettiesoft VestCert

Default version status: unaffected

  • 2.3.6 to ≤ 2.5.29affected

References