CVE-2023-28394

2023-05-2300:00:00

jpcert

www.cve.org

beekeeper studio

remote execution

javascript

os command

8.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.5%

JSON

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well.

CNA Affected

[
  {
    "vendor": "Beekeeper Studio, Inc.",
    "product": "Beekeeper Studio",
    "versions": [
      {
        "version": "versions prior to 3.9.9",
        "status": "affected"
      }
    ]
  }
]