CVE-2023-25143

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Mar 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-251447.8An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and crea CVE-2023-251457.8A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on CVE-2023-251467.8A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete th CVE-2023-251476.7An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypa CVE-2023-251487.8A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing CVE-2023-251498.8TimescaleDB, an open-source time-series SQL database, has a privilege escalation vulnerability in versions 2.8.0 through 2.9.2. During insta CVE-2023-25158.8Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privilege CVE-2023-251505.7Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tr CVE-2023-251517.5opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of `go.opentelemetry.io/contrib/instrumenta CVE-2023-251528.8Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and dire CVE-2023-251535.5containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the nu CVE-2023-251546.1Misskey is an open source, decentralized social media platform. In versions prior to 13.5.0 the link to the instance to the sender that appe