CVE-2023-48257

A flaw in how backup packages are handled allows attackers to steal sensitive data or gain full control of a device. An authenticated user can exploit this directly, or an attacker can trick someone into uploading a malicious backup file to achieve the same result.

The vulnerability exists in exported package handling, allowing authenticated attackers to craft malicious HTTP requests for direct exploitation, while unauthenticated attackers can abuse the import/export mechanism via social engineering to achieve data exfiltration or RCE with root privileges. The attack vectors include direct authenticated exploitation, pre-existing exported backup access, and malicious import packages that trigger authenticated users to initiate vulnerable upload requests.