6.3
Medium
CVE-2023-32454 DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability
Description
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability to create arbitrary files, leading to denial of service
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DUP Framework 4.9 | earliest → 4.9.4.36 | No fix stated |