CVE-2023-54163

Опубликовано: 30 дек. 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through unsanitized input to potentially disclose sensitive information from the mobile banking application.

Ссылки

https://cxsecurity.com/issue/WLB-2023100040
Issue Tracking
Third Party Advisory
https://packetstormsecurity.com/files/175113/NLB-mKlik-Makedonija-3.3.12-SQL-Injection.html
Third Party Advisory
https://play.google.com/store/apps/details?id=hr.asseco.android.jimba.tutunskamk.production
Product
https://www.vulncheck.com/advisories/nlb-mklik-macedonia-sql-injection-via-international-transfer-parameters
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5797.php
Third Party Advisory
https://cxsecurity.com/issue/WLB-2023100040
Issue Tracking
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5797.php
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nlb:mklik_makedonija:3.3.12:*:*:*:*:android:*:*

EPSS

Процентиль: 12%

0.00039

Низкий

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-4rhh-qhhp-cw22

CVSS3: 8.2

github

около 1 месяца назад