Lucene search

GoogleOSV:CVE-2023-31717

HistorySep 22, 2023 - 12:15 a.m.

CVE-2023-31717

2023-09-2200:15:11

Google

osv.dev

sql injection

fuxa

database

confidential information

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.1%

JSON

A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.

CPENameOperatorVersion
fuxaeq1.0.11
fuxaeq1.1.10
fuxaeq1.1.11-2
fuxaeq1.1.9
fuxaeq1.0.2
fuxaeq1.1.8
fuxaeq1.1.11-3
fuxaeq1.1.3
fuxaeq1.0.1_alfa
fuxaeq1.1.4

Name	Operator	Version
fuxa	eq	1.0.11
fuxa	eq	1.1.10
fuxa	eq	1.1.11-2
fuxa	eq	1.1.9
fuxa	eq	1.0.2
fuxa	eq	1.1.8
fuxa	eq	1.1.11-3
fuxa	eq	1.1.3
fuxa	eq	1.0.1_alfa
fuxa	eq	1.1.4

Rows per page:

1-10 of 271

References

github.com/frangoteam/FUXA

github.com/MateusTesser/CVE-2023-31717

youtu.be/IBMXTEI_5wY