CVE-2023-33762
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jun 2, 2023
Updated: Jan 8, 2025
CWE ID 89
Summary
CVE-2023-33762 is a recently disclosed SQL injection vulnerability affecting eMedia Consulting's simpleRedak software up to version 2.47.23.05. An attacker can exploit this vulnerability by injecting malicious SQL code through the Activity parameter, potentially gaining unauthorized access to sensitive data or making unintended modifications to the database. This issue poses a serious threat to organizations using the affected software and requires immediate attention and patching to prevent potential data breaches or system compromises.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.