CVE-2023-4528

ALTO 7.2CVE-2023-4528 · Published 07/09/2023 · updated 17/06/2026

En resumen

CVE-2023-4528 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a jscape mft (redwood).
Probabilidad de explotación en los próximos 30 días (EPSS): 31.9%, mayor que el 98.3% de las vulnerabilidades.
Solución: actualizar a 2023.1.9 o posterior.

Package	Affected versions	Patched versions
jscape mft redwood	`< 2023.1.9`	`2023.1.9`

Description

Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

References

jscape.com/blog/binary-management-service-patch-cve-2023-4528 · Vendor Advisory
rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed · Mitigation

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free