CVE-2023-47609

2023-11-1405:12:19

jpcert

www.cve.org

cve-2023-47609

remote attacker

arbitrary code

database alteration

specially crafted request

0.001 Low

EPSS

Percentile

31.0%

JSON

SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.

CNA Affected

[
  {
    "vendor": "Thinkingreed Inc.",
    "product": "OSS Calendar",
    "versions": [
      {
        "version": "prior to v.2.0.3",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN67822421/

oss-calendar.com/news/20231113/

0.001 Low

EPSS

Percentile

31.0%

JSON

Related for CVELIST:CVE-2023-47609