CVE-2023-31244

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer.

• CWE-824

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04Third Party Advisory, US Government Resource
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04Third Party Advisory, US Government Resource

Published

Jun 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31238A vulnerability has been identified in SICAM P850 (7KG8500-0…4.8
• CVE-2023-31239Stack-based buffer overflow vulnerability in V-Server v4.0.1…7.8
• CVE-2023-3124The Elementor Pro plugin for WordPress is vulnerable to unau…8.8
• CVE-2023-31240Snap One OvrC Pro versions prior to 7.2 have their own local…9.8
• CVE-2023-31241Snap One OvrC cloud servers contain a route an attacker can …10
• CVE-2023-31242An authentication bypass vulnerability exists in the OAS Eng…9.8
• CVE-2023-31245 Devices using Snap One OvrC cloud a…6.1
• CVE-2023-31246Incorrect default permissions in some Intel(R) SDP Tool soft…7.8
• CVE-2023-31247A memory corruption vulnerability exists in the HTTP Server …9.8
• CVE-2023-31248Linux Kernel nftables Use-After-Free Local Privilege Escalat…7.8
• CVE-2023-3125The B2BKing plugin for WordPress is vulnerable to unauthoriz…6.5
• CVE-2023-31250The file download facility doesn't sufficiently sanitize fil…6.5