Lucene search

K
osvGoogleOSV:CVE-2023-34249
HistoryJun 13, 2023 - 5:15 p.m.

CVE-2023-34249

2023-06-1317:15:15
Google
osv.dev
5
benjjvi/pybb
bulletin board
sql injection
vulnerability
software
update
manual sanitation

AI Score

7.5

Confidence

Low

EPSS

0.002

Percentile

56.7%

benjjvi/PyBB is an open source bulletin board. Prior to commit dcaeccd37198ecd3e41ea766d1099354b60d69c2, benjjvi/PyBB is vulnerable to SQL Injection. This vulnerability has been fixed as of commit dcaeccd37198ecd3e41ea766d1099354b60d69c2. As a workaround, a user may be able to update the software manually to avoid this problem by sanitizing user queries to BulletinDatabaseModule.py.

AI Score

7.5

Confidence

Low

EPSS

0.002

Percentile

56.7%

Related for OSV:CVE-2023-34249