CVE-2023-34601

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jun 22, 2023
Updated: Jun 30, 2023
CWE ID 89

Summary

CVE-2023-34601 is a newly identified SQL injection vulnerability affecting Jeesite before commit 10742d3. The issue lies within the component ${businessTable} located at /act/ActDao.xml. An attacker could potentially exploit this flaw by injecting malicious SQL queries, which could result in unauthorized data access or manipulation. This vulnerability poses a significant risk to systems using the affected version of Jeesite and requires immediate attention and patching to mitigate potential threats.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share