New assessment for topic: CVE-2023-41265
Topic description: "An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunneling HTTP requests in the raw HTTP request ..."
"Rapid7 saw exploitation of this in customer environments in early December 2023 ..."
Link:
https://www.attackerkb.com/assessments/9951767f-04e7-43a7-b30b-20d2296cf622