CVE-2023-33366

Опубликовано: 03 авг. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.

Ссылки

https://claroty.com/team82/disclosure-dashboard/cve-2023-33366
Third Party Advisory
https://kb.supremainc.com/knowledge/doku.php?id=en:release_note_291
Release Notes
https://claroty.com/team82/disclosure-dashboard/cve-2023-33366
Third Party Advisory
https://kb.supremainc.com/knowledge/doku.php?id=en:release_note_291
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:supremainc:biostar_2:*:*:*:*:*:*:*:*

Версия до 2.9.1 (исключая)

EPSS

Процентиль: 15%

0.00049

Низкий

8.8 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-q62x-pq6x-fhvw