Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-45684

Опубликовано: 14 нояб. 2023
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:northern.tech:cfengine:*:*:*:*:enterprise:*:*:*
Версия до 3.18.6 (исключая)
cpe:2.3:a:northern.tech:cfengine:*:*:*:*:enterprise:*:*:*
Версия от 3.19.0 (включая) до 3.21.3 (исключая)

EPSS

Процентиль: 68%
0.0058
Низкий

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 лет назад

Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub.

CVSS3: 7.5
debian
около 2 лет назад

Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. ...

CVSS3: 7.5
github
около 2 лет назад

Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub.

EPSS

Процентиль: 68%
0.0058
Низкий

7.5 High

CVSS3

Дефекты

CWE-89