CVE Catalog

CVE-2023-3953

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

6th percentile - higher than 6% of all known CVEs

Summary

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption when an authenticated user opens a tampered log file from GP-Pro EX.

Risk Assessment

This vulnerability could lead to serious data integrity and system stability issues, potentially affecting the organization's operations.

Recommendation

It is recommended that users avoid opening tampered log files and update GP-Pro EX to the latest version to minimize risk.

Original NVD description (English source)

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption when an authenticated user opens a tampered log file from GP-Pro EX.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS