CoreCVE
Back

HIGH

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter

Published May 2, 2023

Description

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 2, 2023
Updated Jan 30, 2025
Reserved Apr 28, 2023
Link CVE-2023-31433
CISA Vulnrichment
Updated Jan 30, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-31433
Red Hat
Severity n/a
Public date n/a
Links CVE-2023-31433