Illegal Access Control Vulnerability Affects Branded Social Images

CVE-2023-28536

Summary

A missing authorization flaw has been identified in Acato's Branded Social Images, resulting from incorrectly configured access control security levels. This vulnerability permits unauthorized access to functions in the affected versions, potentially allowing an attacker to exploit the application without appropriate permissions. All users of the affected versions should assess their exposure and implement the necessary updates to mitigate risks associated with this security issue.

References