CVE-2023-2868 Barracuda Networks Email Security Gateway (ESG) Appliance
Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.
- CVSS
- not scored
On CISA’s exploited list
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
- Added
- 2023-05-26
- Federal patch deadline
- 2023-06-16
- Ransomware use
- not known