Lucene search

K
cvelistMitreCVELIST:CVE-2023-48645
HistoryFeb 02, 2024 - 12:00 a.m.

CVE-2023-48645

2024-02-0200:00:00
mitre
www.cve.org
1
cve-2023-48645
archibus app
sql injection
ios
maintenance module
local database
web central server

EPSS

0

Percentile

9.0%

An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web central server instance every time the application is opened, or when the refresh button is used. There is a SQL injection in the search work request feature in the Maintenance module of the app. This allows performing queries on the local database.

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2023-48645