CVE-2023-2479 is a critical OS Command Injection vulnerability affecting Appium Desktop versions prior to v1.22.3-4. This flaw allows unauthenticated remote attackers to execute arbitrary commands on the affected system with low attack complexity. With a CVSS score of 9.8 (CRITICAL) and an EPSS score indicating high exploitability, the potential impact includes complete compromise of confidentiality, integrity, and availability. While not currently on the CISA KEV catalog, exploit intelligence shows a Nuclei template for Remote Code Execution, and the vulnerability has garnered significant community discussion, suggesting active interest in its exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.22.3-4CPE matchmatch criteria | cpe:2.3:a:appium:appium-desktop:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.