CISA adds NextGen Healthcare Mirth Connect flaw to its Known Exploited Vulnerabilities catalog
ID: 58976026-c430-53b2-9b29-2f5003d83ab8
STIX ID: report--58976026-c430-53b2-9b29-2f5003d83ab8
Feed Name: Security Affairs
Threat Score
CISA added NextGen Healthcare Mirth Connect’s deserialization vulnerability (CVE-2023-43208), which permits unauthenticated remote code execution on versions prior to 4.4.1, to its Known Exploited Vulnerabilities catalog and directed agencies to remediate by June 10, 2024; the report also notes a Google Chrome V8 type confusion bug (CVE-2024-4947) with an exploit in the wild and recommends organizations review and patch affected systems.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.