CVE-2023-3621

Summary

CVE-2023-3621 is a critical vulnerability found in IBOS OA 4.5.5, specifically in the function createDeleteCommand of the file ?r=article/default/delete of the component Delete Packet. This vulnerability allows for SQL injection, which can be exploited remotely. The exploit has been publicly disclosed and may be used by attackers. The vendor has been notified but has not responded. The vulnerability has a CVSS score of 6.5, indicating a medium base severity and low impact on confidentiality, integrity, and availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.