CVE-2023-50895: 
Janitza GridVis vulnerability analysis and mitigation

CVE-2023-50895 affects Janitza GridVis through version 9.0.66. The vulnerability was discovered in the de.janitza.pasw.project.server.ServerDatabaseProject project load functionality, which exposes dangerous methods that can be exploited by remote authenticated administrative users (NVD, Code White).

The vulnerability exists in the project load functionality of the ServerDatabaseProject component, specifically in the de.janitza.pasw.project namespace. It allows authenticated administrative users to execute arbitrary Groovy code on the system. The vulnerability has been assigned a CVSS v3.1 base score of 7.2 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (NVD).

If successfully exploited, this vulnerability allows authenticated administrative users to execute arbitrary Groovy code on the affected system, potentially leading to complete system compromise with high impacts on confidentiality, integrity, and availability (NVD).

The vulnerability requires administrative authentication to exploit. The attack complexity is considered low, requiring no user interaction to execute the arbitrary Groovy code (NVD).

Users should upgrade Janitza GridVis to version 9.0.67 or later to address this vulnerability (Code White).