CVE-2023-25428 – Soft-o Free Password Manager 1.1.20 DLL Hijacking

https://notcve.org/view.php?id=CVE-2023-25428

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution. Soft-o Free Password Manager version 1.1.20 suffers from a dll hijacking vulnerability. • https://packetstormsecurity.com/files/172259/Soft-o-Free-Password-Manager-1.1.20-DLL-Hijacking.html https://www.soft-o.com/products/free-password-manager.html • CWE-427: Uncontrolled Search Path Element •