CVE-2023-28883 - In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint

CRITICAL

In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint

Published Mar 27, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.70%

In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32503		Advisory
https://github.com/cerebrate-project/cerebrate/commit/5f1c99cd534442ec40c2129769608e3e61ff8be3		Patch
https://zigrin.com/advisories/cerebrate-blind-sql-injection/		Third Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 27, 2023

Updated Feb 19, 2025

Reserved Mar 27, 2023

CISA Vulnrichment

Updated Feb 19, 2025

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 27, 2023

Updated Feb 19, 2025

GitHub

No data