CVE-2023-37679

Name of the Vulnerable Software and Affected Versions NextGen Mirth Connect version 4.3.0

Description A remote command execution issue allows attackers to execute arbitrary commands on the hosting server. The vulnerability is related to the XStreamSerializer class and is due to a lack of data sanitization at the management level. This can be exploited by a remote attacker to execute arbitrary commands.

Recommendations For NextGen Mirth Connect version 4.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.