Lucene search
PRIOn knowledge basePRION:CVE-2023-43640HistorySep 22, 2023 - 6:15 p.m.
Sql injection
2023-09-2218:15:00
PRIOn knowledge base
www.prio-n.com
5
taxonworks
sql injection
vulnerability
authenticated attackers
database
users table
information disclosure
fix
TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in TaxonWorks that allows authenticated attackers to extract arbitrary data from the TaxonWorks database (including the users table). This issue may lead to information disclosure. Version 0.34.0 contains a fix for the issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| taxonworks | lt | 0.34.0 |
Related
osv
osv
CVE-2023-43640
2023-09-22 18:15:12
cve
cve
CVE-2023-43640
2023-09-22 18:15:12
cvelist
cvelist
CVE-2023-43640 TaxonWorks SQL injection vulnerability
2023-09-22 17:11:42
nvd
nvd
CVE-2023-43640
2023-09-22 18:15:12