CVE-2023-5457

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-05 · updated 2026-06-17
Weakness: CWE-1269

Description

A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due to the “debug” configuration parameter set to “True”) allows a remote unauthenticated attacker to access critical information and have other unspecified impacts to the confidentiality, integrity, and availability of the application. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

Affected products

AiLux imx6 bundle: before 1.0.7-2 — fixed in 1.0.7-2

How to fix

Upgrade to a fixed version: AiLux imx6 bundle 1.0.7-2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-5457 or the next vulnerability affects your stack