← Database

CVE-2023-24205

CRITICAL CVSS: 9.8 Published: 2023-02-23 Modified: 2026-06-17

Description

Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the configuration file (cfw-setting.yaml).

Affected Platforms

Clash Project Clash

Weakness Type

CWE-732, CWE-732

References