CVE-2023-43208 — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

CISA KEVExploited: confirmedNextGen Healthcare

NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.

Vulnerability details

Affected productsMirth Connect
KEV remediation due2024-06-10