Lucene search

K
cveMitreCVE-2023-27649
HistoryApr 14, 2023 - 12:15 p.m.

CVE-2023-27649

2023-04-1412:15:07
CWE-89
mitre
web.nvd.nist.gov
179
2
cve-2023-27649
sql injection
trusted tools free music
denial of service
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

38.1%

SQL injection vulnerability found in Trusted Tools Free Music v.2.1.0.47, v.2.0.0.46, v.1.9.1.45, v.1.8.2.43 allows a remote attacker to cause a denial of service via the search history table

Affected configurations

Nvd
Node
bestoolstrusted_tools_free_musicMatch1.8.2.43android
OR
bestoolstrusted_tools_free_musicMatch1.9.1.45android
OR
bestoolstrusted_tools_free_musicMatch2.0.0.46android
OR
bestoolstrusted_tools_free_musicMatch2.1.0.47android
VendorProductVersionCPE
bestoolstrusted_tools_free_music1.8.2.43cpe:2.3:a:bestools:trusted_tools_free_music:1.8.2.43:*:*:*:*:android:*:*
bestoolstrusted_tools_free_music1.9.1.45cpe:2.3:a:bestools:trusted_tools_free_music:1.9.1.45:*:*:*:*:android:*:*
bestoolstrusted_tools_free_music2.0.0.46cpe:2.3:a:bestools:trusted_tools_free_music:2.0.0.46:*:*:*:*:android:*:*
bestoolstrusted_tools_free_music2.1.0.47cpe:2.3:a:bestools:trusted_tools_free_music:2.1.0.47:*:*:*:*:android:*:*

Social References

More

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

38.1%

Related for CVE-2023-27649