CyberRota Analysis
AI-GeneratedCAI Content Credentials is vulnerable to an Untrusted Search Path issue that may allow arbitrary code execution with the privileges of the current user. Successful exploitation hinges on user interaction, such as visiting a malicious URL or engaging with a compromised webpage. Organizations using this software should prioritize remediation to mitigate the risk of potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)