CVE-2023-43449: Hummerrisk

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to execute arbitrary code via a crafted request to the service/LicenseService component.

Affected products

• Hummerrisk Hummerrisk: up to and including 1.4.1

Published 2024-01-16. Last modified 2026-06-17.