CVE-2023-23464 Media CP Media Control Panel – Information Disclosure

High 8.1 Published 15 Feb 2023 Updated 19 Mar 2025

A permissive Flash cross-domain policy in Media CP Media Control Panel allows attackers to access sensitive information.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-23464?

CVE-2023-23464 is a high-severity vulnerability in Media Control Panel, published on 15 Feb 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure.

Weakness: CWE-942

Which versions are affected by CVE-2023-23464?

It affects 1 product.

Products include Mediacp Media Control Panel.

How do I fix CVE-2023-23464?

No fix has been published for CVE-2023-23464 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-23464 being exploited?

There is no known exploitation of CVE-2023-23464 in the wild and no public exploit code.

Sources

Also known as GHSA-g89m-r2gh-92r6.