PT-2023-29632 · Nexter · Nexter

Rafie Muhammad

·

CVE-2023-45657

·

Publicado

2023-10-20

·

Atualizado

2024-09-05

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Nexter versions through 2.0.3
Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks.
Recommendations For versions through 2.0.3, update to a version that contains a fix for this issue to prevent SQL Injection attacks.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2023-45657

Produtos afetados

Nexter