CVE-2023-33557
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jun 9, 2023
Updated: Jan 6, 2025
CWE ID 89
Summary
CVE-2023-33557 is a newly disclosed SQL injection vulnerability affecting Fuel CMS version 1.5.2. The weakness lies in the /controllers/Blocks.php file, which fails to adequately sanitize user input on the id parameter. An attacker can exploit this flaw to inject malicious SQL statements and gain unauthorized access to sensitive data or modify database functionalities. This vulnerability poses a significant risk to websites using the outdated Fuel CMS version and requires immediate patching to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.