Lucene search

K
cveMitreCVE-2023-50429
HistoryDec 09, 2023 - 10:15 p.m.

CVE-2023-50429

2023-12-0922:15:07
CWE-89
mitre
web.nvd.nist.gov
8
cve-2023-50429
izybat
orange casiers
sql injection
nvd

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

33.0%

IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection.

Affected configurations

Nvd
Node
izybatorange_casiersRange<20230803_1
VendorProductVersionCPE
izybatorange_casiers*cpe:2.3:a:izybat:orange_casiers:*:*:*:*:*:*:*:*

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

33.0%

Related for CVE-2023-50429