Sql injection

2023-08-0316:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

suprema biostar 2

vulnerability

authenticated users

arbitrary sql commands

nvd

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

JSON

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.

CPENameOperatorVersion
biostar_2lt2.9.1

CPE	Name	Operator	Version
	biostar_2	lt	2.9.1

References

claroty.com/team82/disclosure-dashboard/cve-2023-33366

kb.supremainc.com/knowledge/doku.php?id=en:release_note_291