CVE-2023-38825

SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the password reset mechanism in MyCapMobileApp/update.php...

CVE-2023-38825

Vanderbilt REDCap versions prior to v.13.8.0 are vulnerable to an SQL injection vulnerability. A remote attacker can exploit the password reset mechanism located at the MyCapMobileApp/update.php endpoint to obtain sensitive information. To remediate this issue, users should update to version 13.8...