CVE-2023-28394

creationtimestamp| type| source ---|---|--- 2023-05-23 07:25:27+00:00| seen| https://t.me/cibsecurity/64607 2025-01-17 18:57:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2192...

CVE-2023-28394

Beekeeper Studio is affected in versions prior to 3.9.9 by a code-injection vulnerability that allows a remote authenticated attacker to execute arbitrary JavaScript code with the app’s privileges, potentially enabling arbitrary OS commands on the host. Root cause: untrusted JavaScript execution ...

CVE-2023-28394

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well...