Uncontrolled Search Path Element Remote Code Execution Vulnerability

CVE-2023-44437

Summary

Ashlar-Vellum Cobalt contains a vulnerability that enables remote attackers to execute arbitrary code on installations of the software. This issue arises when the application processes certain file types, leading to the loading of a library from an unsecured location. A successful exploitation requires the user to visit a malicious webpage or to open a compromised file. Attackers can take advantage of this vulnerability to execute code within the context of the affected process, posing a significant security risk.

References