Description
Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the affected product is installed to inject arbitrary code while processing the product execution. Since a full disk access privilege is required to execute LINE WORKS Drive Explorer, the attacker may be able to read and/or write to arbitrary files without the access privileges.
Published: 2023-05-23
Score: 9 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-29841 Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the affected product is installed to inject arbitrary code while processing the product execution. Since a full disk access privilege is required to execute LINE WORKS Drive Explorer, the attacker may be able to read and/or write to arbitrary files without the access privileges.
History

Fri, 17 Jan 2025 22:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 9, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N'}

Subscriptions

Worksmobile Drive Explorer
cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published:

Updated: 2025-01-17T21:47:04.078Z

Reserved: 2023-03-15T00:00:00.000Z

Link: CVE-2023-25953

cve-icon Vulnrichment

Updated: 2024-08-02T11:39:06.539Z

cve-icon NVD

Status : Modified

Published: 2023-05-23T02:15:09.317

Modified: 2025-01-17T22:15:27.970

Link: CVE-2023-25953

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses