critical9.8
CVE-2023-52252
Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the Remote upload endpoint.
Impact
Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the Remote upload endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Unifiedremote | Unified Remote | Version 3.13.0 |