CyberRota Analysis
AI-GeneratedA vulnerability exists in the Kiteworks appliance where an authenticated System Administrator can exploit a system notification template to execute arbitrary operating-system commands through a crafted template. This poses a high risk, as it could allow attackers to gain unauthorized control over the appliance. Organizations using Kiteworks should prioritize patching this vulnerability to mitigate potential security breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance when the notification was next sent.
Related CVEs
Other vulnerabilities affecting the same vendor(s)