CVE-2023-0104
Critical
Description
The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data.
SeverityCritical
CVSS9.3
Exploit probability—
ProductWeintek Easybuilder Pro
PublishedFeb 22, 2023
First seenFeb 22, 2023
Weakness typeCWE-29CWE-29
How to fix
Update
- weintek easybuilder_pro6.07.02.480, 6.08.01.350 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| weintek easybuilder_pro | v < 6.07.02.480, 6.08.01.190 ≤ v < 6.08.01.350 | 6.07.02.480, 6.08.01.350 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.