Anomali · Anomali Match · CVE-2023-49329
**Name of the Vulnerable Software and Affected Versions**
Anomali Match versions prior to 4.6.2
**Description**
The issue arises from improper handling of untrusted input, enabling an attacker to inject and execute operating system commands. An authenticated admin user can elevate privileges, execute system commands, and potentially compromise the underlying operating system.
**Recommendations**
For versions prior to 4.4.5, update to version 4.4.5 or later.
For versions 4.4.5 through 4.5.3, update to version 4.5.4 or later.
For versions 4.5.4 through 4.6.1, update to version 4.6.2.