Remote Code Execution Vulnerability in Ashlar-Vellum Lithium
CVE-2023-44440
What is CVE-2023-44440?
The Ashlar-Vellum Lithium software is susceptible to a vulnerability that allows remote code execution via an uncontrolled search path element. This flaw is triggered when the application parses various file types and attempts to load a library from an unsecured location. For successful exploitation, user interaction is necessary, as the user must either access a malicious webpage or open a compromised file. By leveraging this vulnerability, an attacker can execute arbitrary code within the context of the current application process, potentially gaining control over the system running Ashlar-Vellum Lithium.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Lithium Lithium v12 Beta Build 1204.68
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
