CVE-2023-2567

Name of the Vulnerable Software and Affected Versions Nozomi Networks Guardian and CMC (affected versions not specified)

Description A SQL Injection issue has been found due to improper input validation in certain parameters used in the Query functionality. Authenticated users may be able to execute arbitrary SQL statements on the DBMS used by the web application, allowing them to extract arbitrary information from the DBMS in an uncontrolled way.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.