CVE-2023-30325

Опубликовано: 06 июл. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive information.

Ссылки

https://github.com/wliang6/ChatEngine/blob/fded8e710ad59f816867ad47d7fc4862f6502f3e/src/chatbotapp/chatWindow.java#L33:L60
Product
https://payatu.com/advisory/sql-injection-vulnerability-in-textmessage-field-in-chatengine-1-0/
Third Party Advisory
https://github.com/wliang6/ChatEngine/blob/fded8e710ad59f816867ad47d7fc4862f6502f3e/src/chatbotapp/chatWindow.java#L33:L60
Product
https://payatu.com/advisory/sql-injection-vulnerability-in-textmessage-field-in-chatengine-1-0/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:chatengine_project:chatengine:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00065

Низкий

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-p3hg-mfg5-9mv5